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SCO Sues Two Linux Users, 
Warns About Further Action 


DaimlerChrysler, AutoZone hit with charges; 
Linux user community remains defiant 


TODD WEISS 
Following through threats 
started making months 
ago, The SCO Group Inc. last 
week filed its first lawsuits 
against corporate Linux 
users, targeting auto- 
maker DaimlerChrys- 
ler and auto parts 
retailer AutoZone Inc. 
The twin lawsuits 
expand legal 
campaign against Lin- 
backers into new realm, 
and SCO executives warned 
that more users the open- 
source operating system 
could face legal action they 


don’t license the company’s 
Unix software certify that 
they’re complying with exist- 
ing contracts. 

But the threat may falling 
deaf ears. sampling 
Linux users, who for 
months have said 
they’re not worried 
about SCO’s allega- 
tions, since nothing has 
been proved court, 
maintained that stance 
last week’s lawsuits. 

not all concerned 
about it,” said Tim Kuchlein, 
director New York- 
SCO Suits, page 


guide the strengths 
and weaknesses six 
quality frameworks, from 
CMM Six Sigma. 
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released its National St: 


One year after the Department Homeland Security 
rategy Secure Cyberspace, 


corporate executives say the public/private partnership plan the periphery best. 
Dan Verton investigates the marginalization strategy that was supposed 
guide your company’s cybersecurity initiatives. Story begins page 
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Users Getting 


New Benefits 
From BizTalk 


Update goes beyond 
application integration 


CAROL SLIWA 

For years, companies have 
used Microsoft Corp.’s BizTalk 
Server primarily for applica- 
tion integration, transform 
data from the widely varying 
formats their business ap- 
plications can routed 
other systems inside and 
outside their firewalls. 


But early adopters the 
2004 edition that Microsoft 
launched last week have been 
finding new ways make use 
its scalable rules engine, en- 
hanced business process man- 
agement and business activity 
monitoring capabilities. 

Virgin Entertainment Group 
Inc., for instance, using Biz- 
Talk Server’s new rules engine 
and business activity monitor- 
ing features curb employee 

BizTalk Server, page 


ONLINE Q&A 
Microsoft's top BizTalk executive 
talks about the biz: 
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Become 


More Agile 


Adapting business 


THOMAS HOFFMAN 
SAN DIEGO 
Many companies are eager 
make their departments 
more agile they can re- 
spond faster changing busi- 
ness demands. But getting 
duous process, said about 
Agile IT, page 
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Backup Releas 


When comes data backup and recovery, you want reliable, high-performance solution you 
can count on. why we've created BrightStor ARCserve Backup Release 11, featuring the 
very latest storage innovations. BrightStor ARCserve Backup faster and easier than ever, 
enhancing both efficiency and productivity. And with superior technology, you can 
confident your files are properly backed and will easily restored should disaster occur. 


For more information, ca.com/storage/arcs 
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Refocusing the Future 


the Technology section: Health insurer 
Humana Inc. applied advanced analytic 
models its data warehouse reduce 
costs and identify new markets, say Car- 
McCall and Bruce Goodman. Page 


The Database Diet 


Also the Technology section: 
Archiving can keep databases from 
becoming bloated outdated trans- 
actional data, say pros like Larry 


Cuda Kennametal Inc. Page 


OPINIONS 


Who Holds the 
Security Reins? 


The Department Homeland 
Security unveiled its National 
Strategy Secure Cyberspace 
year ago. Is the plan working? IT 
professionals say it’s the private 
sector that’s taking the lead 
security initiatives, making the 
strategy largely irrelevant. 


PAGE The DHS relegated 
the corporate security margin. 


PAGE How get government 
subsidies for security projects. 


PAGE Lawmakers grill cyber- 
security czar Amit Yoran. 


PAGE The accounting industry 
gets serious about security. 
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Actuate upgrades its server- 


Q&A: Host’s Preparations. 
The CEO the largest Web 
hosting company Europe 
talks about the technology 
needs keep his customers 
and running. 


Future Watch: Putting the 
New News. The news 
delivery systems the future 
will feature interactive, multi- 
media presentations that are 
tailored the needs and 
tastes individual readers. 


Security Manager’s Journal: 
This Your Attacker Calling. 
Hacker attacks computer 
networks get more attention, 
but social engineering attacks 
phone are more difficult 
challenge for Vince Tuesday. 


MANAGEMENT 


based reporting applications. 

Model Mania. face 
confusing array quality 
frameworks, with names like 
CMMI, ITIL and Six Sigma. 
explain them plain Eng- 
lish and identify the strengths 
and weaknesses each. 


Exclusive survey: leaders 
this week’s Pemier 100 
conference are upbeat. 


Mixing voice and data staffs 

poses management challenges, 

say VoiceCon 2004 attendees. 

Q&A: Stay Just Little Bit 
Longer. Flexible employment 
policies for retirement-age 
baby boomers could head off 
skills shortage, say the 
authors Harvard Business 
Review article. 


Sun will offer government 
customers per-citizen pricing. 


The offshoring backlash 
strikes decision-makers. 


Fidelity National moves 

IBM-only infrastructure. Career Watch. The spring 
hiring outlook indicates that 
Windows administration ex- 
pertise great demand. 
Plus, BankOne executive 
describes the types appli- 


cants he’s been hiring. 


The GAO slams the Dept. 
Agriculture over security. 


Domain-name registrars sue 
ICANN and VeriSign. 


the Mark: Mark Hall mulls 
the pros and cons offshore 
outsourcing by software 
vendors. And what about 
the “obscene” money 
Silicon Valley? 


Maryfran Johnson wonders: 
Does DHS stand for “Dumb, 
Huge and Slow”? 


Pimm Fox finds service- 
oriented architecture that 
brings flexibility applica- 
tion integration. 


Dan Gillmor says the U.S. 
has monopoly brains 
energy, huge and eager- 
to-please labor force arising 
overseas. 


Nicholas Petreley isn’t sur- 
prised that free beer trumps 
free speech, but disap- 
pointed. 


Bart Perkins cautions against 
the “peanut butter syndrome”: 
Squeeze the central budget 
too hard, and demand will 
spill over into the budgets 
the business units. 


Frankly Speaking: Frank 
Hayes writes that VeriSign’s 
legal action against ICANN 
good idea. But not necessari- 
for the gains VeriSign hopes 
achieve from it. 


DEPARTMENTS/RESOURCES 
Deadline Briefs 

News Briefs 

Letters 

IT Careers 

Company Index 

How to Contact CW 

Shark Tank 


WWW.COMPUTERWORLD.COM 


LEADERS 


Premier 100 
Conference Coverage 


Get the latest news headlines from this 
week’s event, see complete results sur- 
veys conference attendees and lots more. 


Conference news QuickLink 


Complete survey results and other special coverage 
(registration required) QuickLink a4130 


Conference blog (beginning Tuesday) 
QuickLink 45236 


Harden Your Wireless LANs 
MOBILE/WIRELESS: Atul Bhatnagar of Nortel 
Networks has tips improving WLAN se- 
curity and performance QuickLink 44996 


Combating Zero-Day Exploits 
SECURITY: It’s challenge, but there are steps 
you can take protect your systems against 
unpublished security holes, says Abhay Joshi 
Top Layer Networks. QuickLink 43564 
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DHS Gets Relegated the 
Corporate Security Margin 


One year the National 
Strategy Secure Cyberspace 
was released, professionals 
suggest that may waste 

taxpayer dollars. Dan Verton 


HEN THE White 
House released the 
National Strategy 
Secure Cyberspace 
February last year, the guid- 
ing principle was make 
“living document” capable 
changing with the times and 
meeting the needs diverse 
Internet com- 
munity. 

But the 
year since its release, the strat- 
egy has had little impact 
the security plans and in- 
vestments many the 
companies that were sup- 
posed integral its im- 
plementation, corporate 
executives say. And although 


INVESTIGATIVE REPORT 


some critical-infrastructure 
sectors have heeded the gov- 
call action, many 
corporate users still view the 
plan irrelevant the chal- 
lenges they face. 

“Although all our best 
thinking strategically about 
issues like [the national strate- 
they are the bottom 
any list have,” said John 
Spencer Jr., vice president 
operations and CIO the 
American Society Health- 
System Pharmacists Bethes- 
da, Md. “What’s the payoff? 

have existing budgets that 
change the day, I’m trying 
patch the holes Mi- 
crosoft-based infrastructure 
daily and 
weekly, [and] 
new and dif- 
ferent variants viruses are 
running rampant,” Spencer 
said. could give you list 
100 things like this that I’m ad- 
dressing the minute, day 
and week. can see cause and 
effect related these issues, 
but not with this strategy.” 


Begging vs. Regulating 
For managers like Spencer, 
“cause and effect” translates 
into detailed justification for 
increasing resources 
what the U.S. Department 
Homeland Security’s National 
Cyber Security Division 
(NCSD) asking compa- 
nies across the country: bel- 
and take the lead se- 
curing cyberspace. The threat- 
ened alternative: unwanted 
regulation. 

The irony that the pri- 
vate sector, the onset new 
regulations regulations that 
have nothing with the 
DHS has fact forced im- 
provements cybersecurity, 
users and analysts say. 

For example, Davidson 
Healthcare Lexington, N.C., 


not imple- 
menting the 
Strategy aseri- 
ous 
largely 
dropped the ball. 


RICHARD CLARKE, 

former chairman of the 
President's Critical 
Infrastructure Protection Board 


along with every other com- 
pany the health care indus- 
try, faces April the non- 
negotiable activation the 
Health Insurance Portability 
and Accountability Act, which 


requires enhanced security 
protect private patient data. 

Unlike HIPAA, however, the 
release the national strategy 
necessarily provided 
any [justification] for addi- 
tional funding,” said Kevin 
Davidson Healthcare. “HIPAA 
not recommendation; it’s 
federal law. And when say 
something federal require- 
ment, senior managers can’t 
argue with that.” 

addition HIPAA and 
laws that cover financial re- 
porting, such the Sarbanes- 
Oxley Act, pressing business 
requirements often force secu- 
rity improvements upon se- 
nior executives, said Fred 
Held, partner Tatum CIO 
Partners LLP Los Angeles. 

Held, who recently complet- 
national distribution company, 
said was recent merger 
agreement, not the National 
Strategy Secure Cyberspace, 
that drove his temporary em- 
ployer evaluate its security. 

And therein lies the discon- 
nect, said Craig Janus, vice 
president the Center for In- 
formation and Telecommuni- 
cations Technologies Falls 
Church, Va.-based Mitretek 
Systems Inc. 

“There cohesiveness 
built into the strategy,” said 
Janus. “There are incen- 
tives [such as] tax credits 
cost sharing encourage, 
not force, the private sector 
more.” 

The DHS declined re- 


Security Grants for Grabs 


ObjectVideo provides intelligent 
video surveillance software used 
airports, seaports, U.S. bor- 
ders, oil refineries, chemical and 
nuclear plants, and public water 
supply facilities. Raul Fernan- 
dez, the Reston, Va.-based com- 
CEO, who also serves 
the Council Advi- 
sors Science and Technology, 
spoke with about 
how the company helping 
clients apply for the millions 


federal dollars being made avail- 
able for homeland security pilot 
projects. 


What companies have you 
done this for, and who eligi- 
ble? We've provided government- 
proposal assistance for major air- 
ports and petroleum companies, 
and we've advised several local 
and state law-enforcement agen- 
cies. Grants are set aside for com- 
mercial, state and local organiza- 
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spond directly the com- 
ments. Amit Yoran, head 
the NCSD, had agreed several 
weeks ago meet with Com- 
puterworld March but 
canceled the interview only 
hours before was take 
place. Instead, spokesman 
for Yoran provided written 
statement that offered new 
details about the national 
strategy efforts collabo- 
rate with the private sector. 


Money Well Spent? 

the national strategy inef- 
fectual, it’s not because there’s 
money bolster it. The 
Bush administration has re- 
quested $31 million for secu- 
rity efforts part the fiscal 
2005 budget proposal for the 
Information Analysis and In- 
frastructure Protection Direc- 
torate the DHS. has also 
requested $1.9 million for ex- 
panded cybersecurity exercis- 
uncover vulnerabilities. 

The question being asked 
many corporate users 
whether the money should 
spent the national strategy. 
While there are signs that the 
public/private partnership 
called for the plan begin- 
ning slowly pick steam, 
many users credit private- 
sector programs and initia- 
tives that were under way 
well before the strategy was 
released. 

“In opinion, large part 
the cybersecurity strategy 
aimed vendors and service 
providers solutions,” said 
Rick Perry, director enter- 


tions and sometimes for academic 
associations. But there defini- 

tion critical infrastructure that 

used determine justification. 


gets spread over large number 
grant programs intended for very 
wide variety purposes. 


moment for 
ederal 


t Yoran, the f 


and then mic 
from 


threat-independent,” Yoran 


finaly Rather 


prise operations and security 
The Burlington Northern 
and Santa Co. 
Perry said rail companies 
have voluntarily and without 
goading the DHS formed 
the Rail Industry Security 
Committee share best prac- 
tices and rail security alert 


The individual programs that 


apply our customers will 


Where can they find information 
grants? Award announce- 


ments are usually made agency Each grant program and 
Web sites and Web sites like each round grants may 
www.FedGrants.gov and www. have different levels 
grants.gov. 


How much money available? 
The federal government distrib- 
utes billions dollars grants 
each year, though obviously that 


$20 million per grant. 


What are the steps 

involved the grant 

process? First, it's very 


range from million 


egy 


analysis with the client truly 
understand their business and re- 
quirements. Then typically 
identify short list two three 


are developing 


plans that cover both physical 
and cybersecurity. 

Moreover, Fort Worth, 
Texas-based Burlington North- 
ern recently began working 
pilot program sponsored 
the U.S. Department De- 
fense’s Intelligence Systems 
Support Office called Opera- 


grant programs and determine 
which one will best meet 
the needs and 
time frame. 

average, takes 
anywhere from two weeks 
the proposal. 
writing the proposal 
the quickest part the 
process. The most 
the gathering infor- 


tion Picket Fence. 

The purpose the pro- 
gram, which will begin this 
spring, provide improved 
network security, install and 


and cyberdefense equipment, 
and establish centralized 
monitoring and management 


mation necessary for the proposal. 


Why would clients need your 
company’s help instead do- 
ing themselves hiring 
proposal writer? There art 
writing government proposals, 
because you have understand 
the funding needs and 
terminology. For instance, you 
need know what “force protec- 
tion” means the program man- 
ager DOD order answer 
questions pertaining the 
proposal. 

Dan Verton 


gas industry, 
maintain intrusion-monitoring 


facility for the coordination 
responses cyberterrorism, 
said Perry. 

Likewise, the natural 
all of the initia- 
tives are industry-driven” 
and result the 


national strategy, said Gary 
Gardner, CIO the American 


Gas Association. 
For example, the association 


and the Gas Technology Insti- 
tute this year plan release 


encryption protocol that’s 
capable supporting SCADA 
systems that are used man- 
age natural gas systems, the 
electric grid, water systems 
and other industrial control 
infrastructures. 


Decades Away? 

Ithough Yoran’s appointment 
September lead the NCSD 
has added some momentum 
the strategy, “for 
most people the industry, 
sure it’s plan that’s sitting 
file somewhere,” said 


Continued page 


focusing specific attack was troubled the cyberactivity and cyber- 
ofiles, “we cision to move the posi on pro ‘ion, said Yo an. 
ave yo ocused on proaches “he added. rom ti ite House Hov chmidt, both | 
assessment?” aske heard now sits, severa knowledged that the Offic 
assessme 2S po ded Ki K which has tut oF autho 
Frustrated the line seniority, how are you able for 
earing on cyberterroris lina trom the S and point time. “If they were ser ous 
what the country should classified National Intelli- inability get direct 
posed tough questions the hearing but 


www.computerworld.com 


DHS 
Relegated the 
Corporate 
Security Margin 


Continued from page 


Gardner. “Is driving the 
train? I’m not sure.” 

the first National Cyber 
Security Summit, held Palo 
Alto, Calif., December, and 
again during event last 
month marking the one-year 
anniversary the strategy’s 
release, Yoran said the NCSD 
had moved “from national 
strategy development and ar- 
ticulation implementation.” 

evidence that shift, 
Yoran pointed number 
programs designed prevent 
cyberattacks and enable ef- 
fective response attacks 
that do occur (see box, above 
right). But cautioned that 
the benefits from many the 
“strategic level” programs, 
such those the area 
software assurance, may not 
realized for years even 
decades. 

“Even R&D were not re- 
quired and the tools were 
readily available for de- 
velop more secure code, this 
technology would still have 
work its way into the compil- 
ers several development 
tools commonly used the 
software development com- 
munity,” said Yoran. “And once 
that occurs, there are annual 


CPA 
Ohio-based 


and detail the results 


NEWS 


COMPUTERWORLD March 


U.S. Computer 


Chief 


Emergency Readi- Officers Response and Incident Manage- structure Warning 

ness Team (US- Forum: secure Security Teams: ment Net- 

CERT): Administers together experts from private, 

the National Cyber ment for federal sharing mechanism federal law enforce- secure and survivable 

Alert System. for members ment, defense network for use 
federal CERTs. and intelligence the event Internet 


it's 

sitting file some- 
where. driving the 
train? I'm 


GARY GARDNER, Ci0, 
American Gas Association 


longer development cycles 
before more secure products 
hit the marketplace. And then 
start the long and 
year cycle technology re- 
fresh and upgrades.” 

But Richard Clarke, who 
published the National Strate- 
Secure Cyberspace his 
last official act chairman 
the President’s Critical Infra- 


communities. outage. 


structure Protection Board 
before leaving for the private 
sector last March, said all 
the programs called for the 
document could started 
immediately. 

“They could all done to- 
day the government wanted 
to,” Clarke said. “There’s 
technological reason [for the 
delay]. It’s just matter will 
and resources.” 

The government “is not sit- 
ting down with the electric 
power, transportation, banking 
and finance, and other indus- 
tries and saying, ‘Show how 
implementing the na- 
tional said Clarke. 
“They’re not implementing 
the strategy serious way. 
think largely we’ve dropped 
the ball.” 45224 


MORE ONLINE 


For DHS coverage, visit the Watching 
Washington page on our Web site: 
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Know what costs create, produce and manage all 
company’s documents? Know how cut that cost 40%? 
There’s new way look it. 


The Xerox Office Document Assessment has the answers. 
tells you what you spend and how spend less printing, 
faxing, copying, scanning, and archiving paper and electronic 
documents. Working with Xerox team and using Six Sigma 
methodology, you get comprehensive analysis the total costs 


associated with all your document processes. And you get the 


Learn more: www.xerox.com/learn 
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Windows SP2 
Could Break Apps 


Microsoft Corp. warned last 
week that Service Pack for 
Windows XP, released later 
this year, could render some ap- 
plications inoperable. Because 
security enhancements made 
the expense backward com- 
patibility, Microsoft advising 
code tests against the SP2 beta 
45255]. 


Dell President 
Become New CEO 


Dell Inc. founder Dell will 
relinquish his CEO title current 
President and Chief Operating 
Officer Kevin Rollins, the compa- 
announced last week. Dell will 
remain chairman the compa- 
ny’s board directors. The move 
will become effective July 16. 


Code 
Tool Makes Debut 


Reasoning Inc. today will unveil 
security inspection service 
aimed companies that develop 
C++ code. Mountain View, 
Calif.-based Reasoning’s service 
will help companies find and fix 
root-cause security vulnerabili- 
ties that are the leading targets 
hackers, officials said. Final 
pricing hasn’t been determined 
per line code inspected. 


Short Takes 


The U.S. SECURITIES AND EX- 
CHANGE COMMISSION has re- 
quested information regarding 
Electronic Data Systems Corp.’s 
Navy/Marine Corps Intranet con- 
tract... SUN MICROSYSTEMS 
INC. appointed Marissa Peterson 
executive vice president for 
Sun Service, replacing Patricia 
Sueltz. More than mem- 
bers Congress plan intro- 
duce bill that would make com- 
panies ineligible for government 
financial assistance their poli- 
cies favor overseas workers 
the expense U.S. workers 


MARK THE MARK 


Offshore Advocates 
Woo Silicon Valley ... 


and denounce politicians who campaign against the shipping 
U.S. high-tech jobs abroad. the Software 2004 conference San 
Francisco last week, Romesh Wadhwani, chairman Symphony Tech- 
nology Group LLC Palo Alto, Calif., exhorted audience 1,100 
vendor honchos, including 400 CEOs, get the offshore band- 
wagon order for their companies have viable, profitable future. 
“Most software companies that reinvent their business model will 


use offshore large and strategic, not 
tactical, way,” argues. Translation: 
More software development work 
heading India. Computer Associ- 
ates CEO Sanjay Kumar remarks, “If you 
work behind computer screen, your job 
for grabs.” Some politicians’ jobs may 
hinge their positions outsourcing 
work India, and few are getting 
critical the trend, which amuses Wad- 
hwani. quips, “You know when politi- 
cians say something bad, 
often rambling and disjoint- 
keynote talk the same 
event, Ray Lane also endorsed 
the exodus U.S. jobs India. 
The former chief operating 
officer Oracle Corp. 
now general partner 
Kleiner Perkins Caufield 
Byers, Silicon Valley’s 
leading venture-capital firm, 
claimed that for every 
development dollar sent 
Bangalore, $1.14 gets gener- 
ated the U.S. Pointing 
the distinction between the 
two political parties the 


issue, Lane concludes, “You should 
able figure out how going vote 
November.” Charles Stevenson keeps 
his politics himself, but readily 
shares his views outsourcing. 
the chief technology officer well 
COO Gupta Technologies LLC, data- 
base and software tools vendor Red- 
wood Shores, Calif. such, he’s intimate 
with the value outsourcing. After 
all, cut five quality assurance jobs and 
gave the work Sonata 
Software Ltd. Bangalore. 
But says did pro- 
tect workers the U.S. 
suggests the views 
Wadhwani and Lane “are com- 
pletely out sync with the real- 
ity innovation.” explains 
that face-to-face collabora- 
tion key for critical prod- 
uct architecture, design and 
core development work. 
tactically adding Sonata’s 
quality assurance work, he’s 
able push projects out the 
door 33% faster. This true, 
part, because his Califor- 
nia programmers can see 


Sonata’s analysis their previous day’s 
coding when they reach their desks 
the morning. With in-house quality 
assurance team, there would another 
day between slow things down. 

Another Silicon Valley executive who 
isn’t buying the wholesale rush off- 
shore Jim Green, CEO Composite 
Software Inc. San Mateo, Calif. Green 
says doesn’t care whether your devel- 
opers are Boston Bangalore, you bet- 
ter have foolproof way manage distrib- 
uted development environment. And you 
have one, please share with him, be- 
cause hasn’t seen one yet. Green says 
“teamwork and staying close the cus- 
tomer” were critical during the develop- 
ment the Composite Information Serv- 
er, technology that lets you run queries 
multiple sources through single 
view the data. When spending 
R&D money, Green argues, you want 
every dollar invested return $10, which 
means success paramount. “How 
you maximize your confidence that 
R&D project will successful?” asks. 
Saving few nickels going overseas 

nice, but will the extra management 
and communication hassles put the proj- 
ect risk? Maybe, maybe not. It’s your 
choice. why they pay you the big bucks. 
With the flood venture-capital dol- 
lars drenching Silicon Valley this year, 
maybe companies there have 
move jobs abroad. “There’s much ven- 
ture money the Valley, it’s obscene,” 
says Michael Howard, CEO 
Technologies Inc., which just moved into 
its snazzy new headquarters Cuperti- 
no, Calif. points recent $900 mil- 
lion venture-capital fund desperate 

invest the cash hoard that hired 
dozen telemarketers call execs like 
Howard and beg them take their money. 

says treated them like does 
other telemarketers. Click! 45222 


Actuate Readies Reporting Tools Upgrade 


Cittadini said. intended 
help staffers gauge user 
adoption rates and make deci- 


MARC SONGINI 

Actuate Corp. upgrading its 
server-based reporting appli- 
cations help streamline the 
process developing frame- 
works for generating reports 
and let staffers more ef- 
fectively monitor the soft- 
ware’s use. 

Company last week 
outlined plans for the Actuate 
upgrade, which due for 
shipment this summer. will 
include new user-based pric- 
ing place the existing 
processor-based license fees. 


ease access disparate 
data sources for end users, Ac- 
tuate 8 will include new enter- 
prise information integration 


tools, said Pete Cittadini, the 


South San Francisco-based 
vendor’s CEO. The integration 
capabilities are being drawn 
from technology that Actuate 
acquired last summer when 
bought Nimble Technology 
Inc., a maker of data integra- 
tion software for building Web 
services connections portal 
applications. 

Nimble’s tools will supple- 


ment conventional data ex- 
tract, transform and load 
mechanisms and will let 
workers develop reporting 
routines without having 
understand the underlying 
database plumbing, Cittadini 
said. For instance, report de- 
velopers will able use 
XML-based abstraction layer 
pull information from vari- 
ous data sources. 

Actuate also adding tools 
let administrators view 
which end users are employ- 
ing the reporting software, 


sions about resource alloca- 
tion and other operational is- 
sues, added. Currently, 
such monitoring requires the 
use third-party tool. 

The usage monitoring fea- 
ture could help managers 
judge the success Actuate 
rollouts, said Phil Russom, 
analyst Forrester Research 
Inc. With the new software, 
workers will also able 
measure peak usage times 
the reporting server and the 
use the software depart- 
ments, said. 45213 
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Leader Survey Shows 
Upbeat Outlook for ’04 


But attendees this year’s Premier 100 
conference still see security key issue 


TODD WEISS 
EXCLUSIVE SURVEY 
advance Computer- 
world’s Annual Pre- 
mier 100 Leaders Con- 

ference, large majority the 

executives who responded 

the poll said they’re very 

optimistic about the future 

their businesses’ success. 

The survey was designed 
gauge how 2004 shaping 
for IT, and the 159 respon- 
dents, 25% said they’re “some- 
what” optimistic, while just 
reported that they aren’t 
all optimistic. professionals 


When asked they are considering 
implementing utility on-demand 


computing technology: 


Those who are hiring 2004 said they 
expect add staff these areas: 


who registered for the confer- 
ence, which opens today 
Palm Desert, Calif., were 
polled range topics, 
from security open-source 
software and outsourcing. 
Security remains huge 
concern, with 57% those 
polled saying that viruses, 
worms and other attacks cause 
the greatest expense poten- 
tial for disruption daily 
basis, while 24% said patch 
management the most costly 
disruptive security task. 
About 34% the respon- 
dents said Linux will have 
increased presence their 


When asked what impeding their 
company’s adoption Web services: 


Project management 
-— Infrastructure/networking 
+— Linux development: 7% 
Application development: 3% 


y— Other: 6% 


Systems integration Web services 


infrastructures this year, while 
31% said they use 
plan use it. Another 21% 
plan keep their Linux usage 
current levels. 

hiring this 
year will increase for 44% 
the respondents, while almost 
the same number, 43%, plan 
keep staffing levels the same. 
Only 13% expect staffing cut- 
backs. 


Mixed Agendas 

interviews, several confer- 
ence attendees talked about 
the survey results and the 
issues they face. 

Joseph Cleveland, CIO at 
aerospace and defense con- 
tractor Lockheed Martin Corp. 
Bethesda, Md., and presi- 


PREMIER 100 SURVEY STATS 


OUTSOURCING AND STAFFING 


When asked about their 2004 hiring 
plans for U.S.-based employees: 


METHODOLOGY: In an exclusive Computerworld survey, this year’s Premier 100 IT Leaders and conference attendees from IT 
user companies offered their opinions on the hot issues in the industry. Questions covered a range of topics, including offshore 
outsourcing, security and regulatory compliance. The respondent base for all questions is 159, unless otherwise noted. 


When asked gauge their 
organizations’ involvement and their 
own involvement their companies’ 
regulatory compliance activities: 


are beef- 
ing all 
the tools that 
need for intrusion 
detection. 


JOSEPH CLEVELAND, 
LOCKHEED MARTIN CORP. 


dent Lockheed Martin En- 
terprise Information Systems, 
agreed that security major 
focus. “We are beefing all 
the tools that need for 
intrusion detection,” said. 
William Farrow III, 
the Chicago Board Trade, 
said his hiring will increase 
this year keep with new 


trading and money-transfer 
systems designed modern- 
ize the exchange. “As you ex- 
pand your technical platforms, 
you have expand your peo- 
ple run it,” said. 

Marina Levinson, CIO 
handheld device vendor Palm- 
One Inc. Milpitas, 
said she expects the use 
Linux her company in- 
crease. Linux-based e-com- 
merce platform the company 
inherited with its purchase 
Handspring Inc. will become 
more widely used for Palm- 
Web site, she said. “We 
want leverage and expand 
that,” she said. 

And Jason Glazier, chief 
technology and e-commerce 
officer Philadelphia-based 
Lincoln Financial Group, 
praised the merits on- 
demand technology and said 
his company will moving 
the technology later this year. 
“It definitely has applications 
Lincoln,” Glazier said. 
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When asked about their plans 
for Linux 2004: 


34% 


aid they are increasing Linux 
with current additional applications 
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Enabling Technologies: 


spent their issues, and more time spent your own. Windows 2003, Windows® SharePoint Services, 
For more information, 


Microsoft® 
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Cargill Chooses 
Dell $30M Deal 


Cargill inc. last week said has 
standardized Dell Inc. $30 
million revamp its infrastruc- 
ture. Following eight-month as- 
sessment, Cargill plans stan- 
dardize globally approximately 
30,000 Deli systems coun- 
tries over the next three years, 
said Rita Heise, the Min- 
neapolis-based food, financial and 
industrial products conglomerate. 


Citrix Ship New 
MetaFrame Release 


Citrix Systems Inc. last week an- 
nounced MetaFrame Secure Ac- 
cess Manager Version 2.2. The 
new release provides mobile 
users with secure remote access 
for Microsoft Outlook synchro- 
nization and more flexibility 
user-interface options, company 
said. will available 
this quarter. Pricing for 50-user 
concurrent-license starter system 
begins $7,250. 


WorldCom’s Ebbers 
Charged With Fraud 


Bernard Ebbers, the former CEO 
WorldCom Inc., last week was 
charged with conspiracy and se- 
curities fraud connection with 
accounting misstatements 
$11 billion his former company. 
Scott Sullivan, 
former chief financial officer, 
pleaded guilty charges the 
same indictment and agreed 
cooperate with prosecutors, the 
U.S. Department Justice said. 


Short Takes 


PEOPLESOFT INC. said its Enter- 
priseOne 8.10, due released 
this quarter, will run RED 
GATEWAY INC. said plans cut 
approximately 1,000 employees 
from its workforce over the next 
several months. Gateway ended 
2003 with 7,500 employees, 
down from 11,000 the end 

2002. 


www.computerworld.com 


Mixing Voice and Data 
Staffs Can Volatile 


Clashes hamper 
efforts support 
converged nets 


MATT HAMBLEN 
LAKE BUENA VISTA, FLA 
POPULARITY 
voice-over-IP sys- 
tems growing, but 
some IT managers 
are wrestling with the process 
merging their voice and 
data communications staffs, 
week’s VoiceCon 2004 confer- 
ence here. 

Voice and data staffs histori- 
cally have been separate with- 
companies, often operating 
different units with their 
own cultures, bosses and phys- 
ical locations. More than 
VoiceCon attendees showed 
sion organizing telecommu- 
nications and data communi- 
cations staffs support con- 
verged networks, and several 
managers testified that try- 
ing unify the two sides can 
excruciating. 

“Every day feel like firing 
somebody,” said manag- 
who works trucking 
and transportation conglom- 
erate and asked not iden- 
tified. She said ongoing 
blending the company’s 
voice and data staffs has led 
frequent battles among work- 
ers over their roles the 
combined unit. 

Putting voice and data 
workers together huge 
culture change,” said 
manager who works 
health care company and also 
asked remain anonymous. 
“You can’t just quickly tell 
person, ‘Here your new job. 
Sit down and get 

Training key, said several 
conference attendees who 
have been through the process, 
including some who said they 
feel that they have successfully 
handled the combination 
their voice and data staffs. 


“It’s working out for us,” 
said David Stever, manager 
communication technology 
services at PPL Services Corp., 
energy utility Allentown, 
Pa. PPL started planning for 
voice and data convergence 
about six years ago, had 
time sort through problems 
and plan carefully, said. 

result the conver- 
gence, employees who for- 
merly were dedicated either 
voice data networks now 
work together handle all 
types communications 
needs three integrated 
groups: infrastructure and 
planning, application design 


and operations. There also 
separate department that 
has about 300 workers who 
handle data needs not directly 
related communi- 


cations, Stever said. MORE ONLINE 


Pure VoIP and systems that 
Bank, the telephony and circuit-switched 
technologies are both viable, 
say VoiceCon attendees: 


www.computerworld.com effective way 


SouthTrust 


division initiated 
VoIP project 2000, 
and voice and data 
workers were cross- 
trained each other’s jobs, 
said Stanley Adams, group vice 
president network services 
the Birmingham, Ala.-based 
bank, which has 700 offices 
nine states. The employees 
now work side side oper- 


Plans Per-Citizen 
Pricing for Governments 


ROBERT McMILLAN 
Taking the per-employee pric- 
ing model introduced last 
September great leap for- 
ward, Sun Microsystems Inc. 
last week said it’s readying 
per-citizen licensing plan for 
countries using its Java Enter- 
prise System and Java Desktop 
System software. 

Under the new plan, cus- 
tomers such government 
agencies and possibly interna- 
tional aid groups would pay 
one three per-citizen rates 
for software licenses annually. 
The rate would tied 
country’s ranking the Unit- 
Nations Department 
Economic and Social Affairs, 
which puts countries into one 
three classifications: more 
developed, less developed 


wants 
pirate software, 
would rather 
they pirate ours. 


STEVE BORCICH, SUN 


and least developed. 

government looking 
provide e-mail Web appli- 
cation its citizens would 
pay around cents per citi- 
zen country classified 
“least developed.” “more 
developed” country like the 
pricing would closer 
per citizen, said Steve 
Borcich, executive director for 
Java Enterprise Systems and 
security marketing Sun. 

The licensing model would 
also depend whether cus- 
tomer buys server desktop 
software. The Java Enterprise 
System bundle Sun’s 
server software products, in- 
ciuding its directory, applica- 
tion and portal servers 
could installed only the 
government that signed the 
deal. Therefore server li- 
cense purchased national 
government cover 
municipal governments. 

Any citizen the licensed 
country would have the right 
install the Java Desktop 
System, which includes Star- 
Office applications and Lin- 
operating system. 


ations, engineering and sup- 
port. “It was cultural change 
and took time, but increas- 
flexibility,” Adams said. 

Donald Van Doren, presi- 
dent Vanguard Communica- 
tions Corp., consulting firm 
Morris Plains, said the 
complexity combining voice 
and data staffs big concern 
for some his clients. “The 
heritage data and voice guys 
just different,” 
said. “It’s the 
DNA.” 

Van Doren said 
organizational struc- 
ture similar PPL’s 


start, with staffers 
assigned support the net- 
work infrastructure, applica- 
tions endpoint devices such 
phones and PCs. The latter 
group also can put charge 


end-user support, said. 
45247 


Sun expects roll out the 
new licensing plan time for 
its JavaOne developer confer- 
ence San Francisco June. 

Sun would essentially rely 
honor system enforce 
its desktop licenses, said Bor- 
cich, who acknowledged that 
would very difficult 
control software piracy under 
the system. “We don’t want 
advocate piracy, and cer- 
tainly like to make revenue,” 
said. “But someone wants 
to pirate software, we would 
rather they pirate ours, and 
Java general, than some oth- 
competing technology.” 

Per-citizen licensing 
novel approach capturing 
more the $13.9 billion world- 
wide government software 
market, governments in- 
creasingly focus open- 
source software, said Rishi 
Sood, analyst Gartner Inc. 

“There certainly needs 
reorientation how U.S. 
technology companies can 
look [developing] countries 
and adopt their products and 
services meet [those coun- 
tries’] unique economic cir- 
cumstances,” Sood said. 
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McMillan writes for the IDG 
News Service. 
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make our professional insurance staff Betty Johnson 
more productive, efficient, and accurate Vice President 
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Betty Johnson vice president Information 
Technology The Nonprofits Insurance 
Alliance (NIA) Group Companies, which 


provides liability insurance for 501(c)(3) 
charitable nonprofit organizations states 
and Washington, D.C. her staff, she’s 
Her challenge: design system that fully 


integrated the claims and underwriting 
processes. “We needed streamline our 

Her response was NIAC2000, modular, fully 

integrated underwriting and claims processing 
system. This capabilities capture 

both structured and unstructured data, and its 

intuitive graphical user interface makes 
NIAC2000 pleasure use. Incorporating all 
lines the existing business, NIAC2000 
also makes simple add other modules, such 
finance and marketing. 
Since deploying NIAC2000 early 2001, 
NIA Group has greatly increased its productivity. 
The result? 300 percent rise insurance 
premium revenues, but only percent 
increase staff. 


Great Moment Work: 
“Seeing the satisfaction staff. who we, 
IT, work for.” 


Microsoft Office System salutes those 


Great Moments Work. 


Office 
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Offshoring Debate Continues Amid Backlash 


decision-makers 
deal with political, 
emotional issues 


PATRICK THIBODEAU 
LAS VEGAS 
Although the backlash from 
offshore outsourcing doing 
little slow the accelerating 
trend, it’s increasingly notice- 
able conferences attended 
managers who make and 
execute offshoring decisions. 
The focus political and 
emotional issues associated 
with offshoring turning por- 
tions these conferences, 
such the Outsourcing 
Strategies 2004 confab here 
last week, into mix pep 


talks and gripe sessions. Also, 
fewer users are willing ap- 
pear conference panels 
talk about offshore work, and 
some are canceling appear- 
ances. Deals, once touted 
vendors, are often longer 
publicly announced. 

One manager who said 
was wrestling with out- 
sourcing decision raised his 
hand conference session 
and asked, “How justify 
myself?” 

The justification complex. 
The manager, who asked not 
named, was advised 
panelists ensure that the 
economics are compelling. 
And heard the frequently 
expressed view that job loss 


Continued from page 
Agile 


dozen attendees Meta 
Group Inc.’s Metamorphosis 
conference here last week. 

lot easier identify 
the ‘what’ than the 
said Salim Nuraney, director 
architecture Ontario Lot- 
tery and Gaming Corp., 
Toronto-based government 
agency that runs lottery and 
casino operations for the 
province Ontario. 

Meta analysts preached 
about the need for more 
adaptability and the complexi- 
achieving it. Nuraney and 


Correction 


The name Palo Alto Research 
Center Inc. principal scientist 
Feng Zhao was misspelled the 
March story “Sense This.” Also, 
the information-driven sensory- 
querying algorithm with which 
team experimenting 
would enable sensors au- 
tonomously task themselves 
collect and transmit information 
based the usefulness the 
information. edited, the story 
incorrectly stated that the algo- 
rithm would enable users task 
the sensors collect and trans- 
mit data based its usefulness. 


other conference attendees 
generally agreed with the con- 
sulting firm’s contention that 
ter job training their staffs 
react changing business 
requirements, make their tech- 
nology cost structures more 
variable and meld the systems 
that support individual busi- 
ness units into more cohesive 
enterprise architectures. 


End-User Resistance 
Several managers the 
conference cited resistance 
end users organizational 
and business process changes 


key impediment. “The last 


thing end users want hear 
another great idea that came 
from IT,” said Lisa Yeo, CIO 
for the Multnomah County 
government in Portland, Ore. 

Yeo noted that some county 
agencies still want maintain 
separate systems and archi- 
tectures, despite the efficien- 
cies and cost savings that could 
achieved managing sys- 
tems under single architec- 
ture. “We’re trying show 
them how sharing common 
systems and platforms would 
help countywide,” she said. 

addition, some attendees 
said it’s hard ignore de- 
mands from revenue-generat- 
ing business units for specific 
systems applications, even 
the technology doesn’t fit 


fact life that requires 
adaptable workforce. Accord- 
ing that line thinking, the 
U.S. sheds thousands jobs 
annually for variety rea- 
sons unrelated offshore 
work, such productivity im- 
provements gained from tech- 
nology. It’s article faith 
offshore outsourcing confer- 
ences that the U.S. economy 
dynamic and that innovation 
will generate jobs. 

What’s not dispute cor- 
porate interest offshoring. 
The political controversy “is 
not changing slowing the 
impact our business,” said 
Michel Janssen, consultant 
The Everest Group, Chicago- 
based firm that advises buyers 


outsourcing services. “The 
trend just happening faster 
and faster.” 


Strong Emotions 
But that doesn’t make easier. 
“It emotional for lots peo- 
ple,” said David Elmo, presi- 

dent and chief op- 


process calls “microsourc- 
ing.” The process focuses 
select functions, particular- 
where there are backlogs, 
and not entire departments. 
Elmo argues that companies 
can outsource too much and 
leave themselves vulnerable 
changes business processes. 
think have take re- 
sponsibility for what’s hap- 
pening, and think 


erating officer 
Corbus LLC. 
“Backlash connotes 
emotion.” 

Dayton, Ohio- 
based Corbus 


MORE ONLINE 


For more on this topic, 
visit our Outsourcing 
Knowledge Center: 


QuickLink 
www.computerworld.com 


through,” said. 
Stamford, Conn.- 
based Gartner Inc. 
earlier this month 
said the trend 


outsourcer that 

does development work In- 
dia. But the company says 
has approach mitigate 
some the backlash while 
delivering savings through 


fact toward selec- 
tive sourcing and busi- 
ness processes, characterized 
smaller agreements and 
fewer unwieldy megadeals. 
45263 


Which the following describes 
your department’s plan for becoming 
adaptive organization? 


Has broad 
initiative place 


Already 
adaptive 


Has plans 
focus becoming 
more adaptive 


pursue 
adaptive capa- 
bilities 
targeted basis 


become 
more adaptive 
but unsure 
how proceed 


BASE: More than 600 IT managers at North American companies, surveyed late last year 


SOURCE META GROUP INC., STAMFORD, CONN 


within wider strategy. 

Meanwhile, according 
Meta Group survey 300- 
plus and business man- 
agers that’s due released 
next month, the biggest barri- 
ers cited the respondents 
were lack staff support 
and the need make too 
many changes internal busi- 
ness processes. 

can also tough align 
with business goals busi- 
ness unit managers aren’t will- 
ing devote enough attention 
projects aimed serving 
their needs. “Business users 
still don’t want give their 


time and get engaged proj- 
ects,” said Alex Sinclair, direc- 
tor client services the Ot- 
tawa-based Canadian Security 
Intelligence Service, Canada’s 
equivalent the U.S. Depart- 
ment Homeland Security. 
applications manager 
large Midwestern manufac- 
turer, who requested anonymi- 
ty, said he thinks his compa- 
ny’s department already 
does good job aligning 
with its business units un- 
derstand their needs. But, he 
added, the only way be- 
come truly adaptive orga- 
nization defined Meta 


“is that you really need stop 
the ship. You can’t, so the 
challenge trying this 
while the ship motion.” 

That task further compli- 
cated the fact that many 
understaffed departments 
are struggling just manage 
day-to-day operations, said. 

AAA Northern California 
plans become more adap- 
tive rolling out suite 
portfolio management tools 
from ProSight Inc. busi- 
ness and project managers 
this month. The system will 
extended another 175 busi- 
ness unit leaders and project 
coordinators summer, said 
San Retna, director portfo- 
lio and program management 
the San Francisco-based 
AAA affiliate. 

The portfolio management 
capabilities are expected 
help the department antici- 
pate and react business de- 
mands more effectively. “It’s 
like developing the sensors 
make your central nervous 
system work,” Retna said. 
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AGILE COVERAGE 


Government IT managers say building 
adaptive systems poses challenges: 


QuickLink 45245 


Read a Q&A with Meta Group CEO 
Fred Amoroso: 


QuickLink 45188 
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Arc 


Legendary Reliability 


Integrated Cable Routing & 
Self-contained cable 
routing allows for 
installation anywhere - 
no raised floor needed. 


Rack Air 
Removal Unit 
Optimizes heat 
removal from 
densely config- 
ured racks 


Environmental 
Monitoring 

Local or remote 
monitoring of temper- 
ature and humidity 
and other conditions 
in your enclosures. 


[power routing] 


PDU with 

System Bypass 
Rack-optimized design 
with configure-to-order 
multi-branch whips to 
speed installation. 


InfraStruXure” Manager 
1U appliance + 1U 24-post 
hub provide remote man- 
agement of entire system 
through a single IP address. 


NetworkAIR™ FM 
Modular floor mount 
precision air conditioning 
for environmentally sen- 
sitive equipment areas 
Rack Air Distribution Unit Multiple installation 
Delivers equalized airflow from the choices: in-row (shown) 
bottom the top the down air discharge 
help eliminate unequal temperatures _(raised floors), up flow 
and protect sensitive (single rows) 


Rack-mount PDU 
(Basic, metered, 
switch models) 
Up to 42 recepta- 
cles, monitored 

to eliminate branch 
circuit overloads 


N+1 UPS 

Scalable, modular and 
manageable UPS with N+1 
redundancy for unmatched 
levels of availability 


Pay you grow with pre-tested APC 


Cure on-demand architecture for network- 


Traditional data centers are 

built out for future capacity and 
require a large amount of floor 
space that could be otherwise 
utilized. High power density racks 
create dangerous hot spots. 


critical physical infrastructure (NCPI*), 


(floor plan) 


InfraStruXure™ speeds the specification, 
On-demand architecture for network- 
critical physical infrastructure design, and installation environments. 


Using Web-based configuration tool simplify the design 
process and configure-to-order approach, InfraStruXure’s 
rack-based, standardized modules provide you with pre-tested, 
integrated system that assembles matter hours. 


InfraStruXure™ lets you build out 
capacity only as it's required. Save 

up to 50% CapEx and 20% OpEx* 

and reclaim an average of 20% usable 
space. InfraStruXure delivers cooling 
directly where it is needed, eliminating 
=| dangerous hot spots 


InfraStruXure Architecture 
H 


(floor plan) 


APC InfraStruXure built for speed and more: system resiliency, 
lower cost, higher availability. So, you’re looking deploy your 
servers days, look further than infraStruXure. 
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Fidelity National Revamps With Single-Vendor Tack 


LUCAS MEARIAN 
Fidelity National Financial Inc. has un- 
dertaken four-year project replace 
its distributed, multivendor computing 


environment with centralized infra- 

structure based IBM technology. 
Jacksonville, Fla.-based Fidelity Na- 

tional said the project, which costing 


Executives 


esign 
and 


Early and Save $200! 
Early bird registration just $695 $200 savings! 
bird registration ends April 


| 990 T-Rex mainframes run- 


“tens millions” dollars, will en- 
able the company increase speed 
and reduce management complexity 
its mortgage division, which processes 
trillion loans every night for the 
nation’s largest banks. 

Joe Nackashi, Fidelity National’s 
chief technology officer, said 
the existing infrastructure 
built around two IBM eServ- 
zSeries 900 mainframes 
and 800 1,000 servers. 
Those systems run range 
distributed client/server 
applications, including Mi- 
crosoft Corp. SQL Server 
and Oracle Corp. databases. 
The plan consolidate 
those systems onto three 
new IBM eServer zSeries 


ning IBM’s DB2 database. 

The project also involves 
streamlining Fidelity Na- 
tional’s communications 
with member banks 
means portal-based sys- 
tem built with IBM’s Web- 
Sphere middleware and its 
Rational Unified Process methodology 
practices. 

“Clearly, from our perspective, 
will need fewer people manage and 
develop the environment. go- 
ing see clear ROI,” Nackashi said. 


Vendor Finger-Pointing 

choosing single vendor, Nackashi 
said he’s able move away from “the 
complexities client/server distrib- 
uted world” and simplify vendor ac- 
countability. “You know how goes 
when you have all the vendors doing 
all the finger-pointing,” said. 

Guillermo Kopp, analyst 
TowerGroup Needham, Mass., said 
that the past several years there has 
been steady growth the amount 
dollars financial services companies 
are spending replace legacy systems. 
The driver cost containment. 

2004, system revamps will repre- 
sent $41.8 billion, 12%, total 
$347.2 billion that financial services 
companies are expected invest 
worldwide, Kopp said. 2000, com- 
parison, legacy transformations repre- 
sented less than 10% total dollars 
spent the industry, Kopp said. 

For every dollar saved infra- 
structure, there’s saved op- 
erational business expenses because 
many legacy processes are convoluted, 


need fewer 
people man- 
age and develop 
the environment. 
going 
tosee 


JOE NACKASHI, CTO, 
Fidelity National 


NEEDHAM. MASS 


SOURCE. TOWERGROUP 


require manual intervention and often 
create errors, Kopp said. 

Fidelity’s current Cobol-based mort- 
gage processing system has “signifi- 
cant lines code,” which chal- 
lenge manage when adding func- 
tionality, Nackashi said. And although 
70% the system’s processes operate 
real time, customers are asking for 
more services-oriented architectures 
with increased functionali- 
and scalability. 

Fidelity’s revamp fol- 
lows trend among the 
country’s largest financial 
companies install sys- 
tems with greater process- 
ing capacity improve 
transaction performance 
and cut costs. But not all fi- 
nancial institutions are tak- 
ing the same approach. 

Charles Schwab Co. 
San Francisco went live 
December with Linux- 
based grid-computing sys- 
some its compute-inten- 
sive investment manage- 
ment applications. 

David Dibble, executive 
vice president technolo- 
services Charles Schwab, said 
he’s glad “the last three years are be- 
hind us,” referring the financial 
downturn and the fact that financial 
services companies are now starting 
able invest more IT. 

“We're quite good generating self- 
funding projects. deploying Linux 
across our Schwab.com site, 
been able save millions, which 
been able invest back into our infra- 
structure,” Dibble said. “You may have 
spend money save money.” 
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Note: Percentage 
of total IT spending 
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GAO Faults Security Agriculture Dept. 


report from the U.S. General 
Accounting Office. 

The 33-page report [Quick- 
Link a4110 for PDF], released 


TODD WEISS 
The U.S. Department Agri- 

culture has “significant, perva- 
sive information security con- 


trol weaknesses” stemming 
from the lack fully imple- 
mented security manage- 
ment program, according 


last week, strongly criticizes 
the USDA for security weak- 
nesses, which potentially leave 
its proprietary information, 
and financial transac- 
tions, agricultural and market- 
ing data, and other informa- 


has years expertise 
supply chain and 
continue learn from 
the best the business... 


our customers. 


solutions can help you intelligently 
shape and respond customer demand 
match available supply closing the 
loop between planning and execution. 
Many leading companies have been able 
to control costs, reduce inventory, increase 
throughput, and boost profit margins using 


i2 solutions. 


you plan attend only one 
business conference this year, 
register now for 2004 
San Diego. This premier event will arm 
your company with the strategies and tactics 
turn your supply chain into competitive 
weapon. learn more register for this supply 
chain best practices summit, call 1-877-4-PLANET 


tion “at increased risk 
unauthorized disclosure, mod- 
ification loss, possibly with- 
out being detected.” 

tighten the agency’s 
security, the GAO report rec- 
ommends that top-to-bottom 
security management program 
implemented, including im- 
proved controls network 
boundaries, network access, 
mainframe access and overall 
system access management 
better show who using the 
agency’s systems. 


Unmet Goals 

The GAO acknowledged that 
the USDA has made some 
progress since 2000, when 
recommended that the USDA 
develop and document strat- 
egy for improving information 
security. But was critical 
the extent that progress. 

“Agency security personnel 
have lacked the management 
involvement needed effec- 
tively implement security pro- 
grams,” while “three agencies 
[inside the USDA] have not 
completed any the required 
risk assessments” that were 
laid out for them previously, 
according the report. “Secu- 
rity controls have been tested 
and evaluated for less than 
half the department’s sys- 
tems the past year.” 

Scott Charbo, CIO the 
USDA, couldn’t reached 
for comment. But reply 
the GAO, Charbo said that the 
report “accurately reflects is- 
sues and concerns identified 
the GAO” and that con- 
curs with the need improve 
the agency’s security. 

Robert Dacey, director in- 
formation security issues 
the GAO, last week declined 
comment further the 
document. 

The GAO also found that the 
network “does not pro- 
vide secure operating envi- 
ronment” support its users. 
“While USDA established re- 
strictive policy protect its 
agencies’ internal networks 
from the Internet using 
firewalls, its current network 
boundary controls are not 
configured accordance with 
its security policy and not 
provide adequate protection,” 
the report stated. 45167 
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Domain Registrars Sue ICANN, VeriSign 


ROBERT McMILLAN 
Just day after being sued 
VeriSign Inc. over delays 
approving new service for 
back-ordering Internet do- 
main names [QuickLink 
45059], ICANN, the organiza- 
tion that controls the Inter- 
net’s Domain Name System 
found itself being sued bya 
group eight domain-name 
registrars seeking stop the 
new service’s implementation. 
And this time, VeriSign was 
named co-defendant. 

The lawsuit, filed Feb. 
the U.S. District Court Los 
Angeles, seeks halt the im- 
plementation VeriSign- 
backed waiting list for expired 
domain names called Wait 
Listing Service (WLS). 

The suit accuses VeriSign 
and the Internet Corporation 
for Assigned Names and Num- 
bers, the nonprofit organiza- 
tion responsible for allocating 
address space and manag- 
ing top-level domains, 
“planning implement 
scheme dupe consumers 
into buying domain names the 
consumers will never able 
register, and unlawful 
and fraudulent protection 
racket.” 


Back-Ordered Domains 
Popular domain names are 
often back-ordered and then 
auctioned when they become 
available again. According 
Bill Mushkin, CEO of Name.- 
com LLC, one the registrars 
behind the lawsuit, while cus- 
tomers may pay relatively 
high fee for back-ordered 
domain which, average, 
costs $30 $60 they pay 
for the domains only when 
they actually obtain them 
Under the WLS system, 
back-ordered domains would 
first-served basis, but cus- 
tomers would pay annual 
fee back-order the domain, 
regardless whether be- 
came available for purchase 
during the year, Mushkin said. 
ICANN failed return calls 
seeking comment press 
time. 
While VeriSign declined 


comment directly the suit, 
citing company policy against 
discussing ongoing litigation, 
Tom Galvin, VeriSign’s vice 


president government rela- 
tions, defended the WLS sys- 
tem, saying would help re- 
move the uncertainty involved 


back-ordering domain 
names. 

Galvin said hopes WLS 
could soon implemented. 
been working this 
service for over two years, and 
hope, either Rome 


sometime shortly after that, 
reach solution,” said, re- 
ferring meetings 
there this week. 45189 


McMillan writes for the 
IDG News Service. 
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MARYFRAN JOHNSON 


DHS: Dumb, Huge, Slow 


YOU’VE BEEN ALL WORRIED that the 
Department Homeland Security might 
doing something worth paying attention to, 
rest easy. When comes having any signifi- 


cant impact corporate 
security plans, the 
$36 billion federal agen- 
has been monumen- 
tally ineffective. 

our front-page sto- 
this week points out, 
it’s private-sector com- 
panies particularly 
transportation, utilities 
and finance that are 
driving their own 
security strategies 
protect the nation’s criti- 
cal infrastructures. Without any 
push from the DHS, for example, the 
Rail Industry Security Committee 
busy sharing best practices for both 
physical and cybersecurity. the 
natural gas industry, same story. 

“All the initiatives are industry- 
driven,” says Gary Gardner, CIO 
the American Gas Association. 


| 
Given that the private sector owns 


and operates 85% the critical in- 
frastructure that keeps our lights 
and water flowing, this may seem 
like the natural course events. But 
least part the fantasy behind 
spending billions our tax dollars 
the DHS was create agency 
that could orchestrate public/ 
private collaboration security 
matters. think largely 
dropped the ball,” says Richard 
Clarke, former chairman the 
Critical Infrastructure 
Protection Board. 

and senior executives 
would doubt agree. They’ve all 
noticed that there are incentives 
the “National Strategy 
Secure Cyber Space” plan for pri- 
vate industry. tax credits. 
cost sharing. real reason care. 

The companies that care, how- 
ever, are computer industry vendors 
and service providers. They influ- 
ence DHS strategy and direction 


MARYFRAN 
editor in chief of Comput- 
erworia You can contact 

her at maryfran_johnson@ 


computerworid.com. 
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through handful 
powerful lobbying 
groups, the most promi- 
nent being the Informa- 
tion Technology Associ- 
ation America. Their 
agendas boil down 
this: Prevent any new 
government regulations 
reporting require- 
ments that would man- 
date changes prod- 
ucts. far, mission ac- 
complished. 

For its part, the DHS has man- 
aged stay the headlines with 
steady supply screw-ups. July 
2003, the Homeland Security ge- 
niuses signed deal for $90 million 
worth Microsoft software just 
yet another critical security flaw 
Windows was everywhere the 
news [QuickLink 39989]. Around 
that time, perhaps coincidentally, 
the status the cybersecurity job 
once held Clarke fell many 
rungs down the political ladder that 


Then, last August, report from 


the General Accounting Office, the 
investigative arm Congress, docu- 
mented what pitiful job the DHS 
was doing its security informa- 
tion-sharing efforts with state and 
local authorities 40907]. 
Not that the DHS wasn’t trying. Its 
newly appointed CIO, Steven Coop- 
er, was quoted last summer giving 
advice the fast food industry about 
how help raise public awareness 
42809]. They could set 
out cybersecurity pamphlets 
their counters, suggested. (Would 
you like fries with that?) 

The almost comical lack coor- 
dination between the agency and its 
partners drew the spotlight again 
late January, with the announcement 
cyber alert system that elicited 
collective “Say what?” from private 
industry partners who discovered 
that they the DHS loop 
after all [QuickLink 44417]. 

Just few weeks ago, the agency’s 
latest brainstorm was program 
persuade the private sector share 
vulnerability and security data with 
the government: (Maybe like 
fries with that, too.) 

the meantime, you can safely 
continue pay attention the 
little men behind the curtain the 
DHS. All they’re doing wasting 
their time and our money. 45207 
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PIMM FOX 


Reusable 
Integration 


With SOA 


ANY WEB SERVICES 

are merely APIs 

wrapped some 
Web interfaces; they can make 
only single-point connections 


legacy systems. They are 
but shadow compared with the larger 
vision embodied service-oriented 
architecture (SOA), which able 
establish reusable components and 
functionality using XML [see 
QuickStudy, QuickLink 44708]. 

With SOA, you can look into 
XML-based request, open messages 
the fly runtime and check details. 
For example, you’ve got order en- 
try system that’s dumping messages 
into SAP back-end system, you can 
pay attention discrete parts the 
messages accom- 
modate different 
business partners. 
Some the mes- 
sages’ contents 
might routed 
specific servers, 
orders above cer- 
tain dollar amount 
might flagged for 
special handling. 

It’s this ability 
address the details, 
combination with 
reusable 
components, that has drawn the atten- 
tion experts Seattle-based 
health care provider Providence 
Health System. Recently, Providence 
was faced with the task hooking to- 
gether all its different systems hold- 
ing patient records, billing informa- 
tion and insurance data. And 
course, each detailed record would 
have sheltered that the wrong 
people gain access person- 
information. 

But Mike Reagin, Providence’s di- 
rector R&D, has lots legacy appli- 
cations support and integrate. One 
his biggest challenges has been 
dealing with traditional enterprise 
application integration suppliers. 
They’ve typically called the shots re- 
garding how and when EAI-based 
transactions would occur, and Reagin 
has needed developers familiar with 


PIMM FOX is a freelance 
writer Santa Barbara, 
Calif. Contact him at 
pimmfox@pacbell.net. 
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AT&T APPLICATION AWARE NETWORK. Can your network make decisions? Can proactive? 
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True network intelligence 
changes the game for customers. 
Application-Aware 
Network will built single, 


global photonic infrastructure AT&T taking the intelligence and technological power the network and 
that automates and simplifies centering the user’s will “application-aware,” serving 
every application providing the enterprise’s needs real-time that every demand anticipated and 


built-in network intelligence 
that anticipates user needs, 
diagnoses and self-heals 
keep the network running 
smoothly. Now that’s more 
than just simple it’s smart. 


met; every business objective satisfied. The enterprise will retain full control 
over its own applications, and can constantly monitor its performance 
assure things are running expected. 


The Application-Aware Network will have the ability deploy application 

the appropriate server well manage the load balancing across multiple 

Applications will servers maximize results. When application longer needed, those 
dynamically deployed resources will made available other applications. Reliability and business 
maximize server utilization continuity will achieved deploying applications across number 


and performance, improving 
servers and across number nodes. 
the customer experience and 


reducing capital investments. 


The network will take advantage new technologies provide shared, 


will anticipate peak usage standards-based infrastructure for deploying, integrating and operating 
with the intelligence mission-critical applications. Customers will benefit from the economies 
handle spikes demand scale achieved leveraging shared infrastructure and also benefit only 
automatically allocating paying for the resources actually used while knowing that the capacity 


anticipated capacity. available handle spikes demand. 


will reduce cost 
leveraging operational 
support infrastructure (i.e. 
systems, people, etc.). 


will provide hands-free, 
end-to-end flow through 
process, enabling AT&T 
deliver services customers 
real-time, ultimately, with 
zero cycle time and zero 
defects. 


The Mover and Shaker the Telecommunications Industry for his 
vision creating flexible, multi-service network edge with the 
capability for customers self-provision services. LightReading.com 


Hossein was recognized the Executive Council New York one 
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business continuity will 
infused into every layer. 
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the nuts and bolts the legacy systems. 

“The situation made difficult 
build patient portal,” says Reagin. 
Now Providence using SOA ap- 
proach for application integration from 
Cupertino, Calif.-based Infravio Inc. 
The development platform uses Web 
services and library created devel- 
opers using Java. The developer cre- 
ates only what’s needed particular 
time rather than trying connect 
entire system. 

“The first time need access 
some type information, create 
call that can then reuse,” says Rea- 
gin. Providence able manage in- 
formation discrete units, patient 
record requested doctor is, from 
perspective, the same infor- 
mation about diabetes that’s pushed 
someone whose patient record notes 
his condition. 

This approach real benefit. 
means that lab results can contain in- 
surance information that should 
viewable billing department while 
withholding health data that should 

vailable only the doctor another 
approved health worker. 

With the SOA approach, Provi- 
dence has been able build compo- 
nents designed fetch just the infor- 
mation that’s needed particular 
person, rather than stapling together 
legacy systems that remain inflexible. 
45043 


DAN GILLMOR 


Offshoring 
And Lowered 
Expectations 


THE BEST 

things about living and 

working Silicon Val- 
ley the quality the peo- 
ple. I’m frequently the least- 


knowledgeable person the 
room, and probably the stupidest. get 
learn from the ultrasmart and cre- 
ative folks meet. 

why have uneasy feeling 
these days about the place, even 
economic recovery for the technology 
industry starts gather steam? 

One factor abounds with irony. 
few years ago, wondered the Valley 
was sowing the seeds its demise 
creating the communications and col- 
laboration tools that would make 
much less necessary there 


physical sense. The near- 
unanimous consensus the 
time among the top people 
the field was that the Val- 
ley had nothing worry 


about. 


never entirely bought 
their faith, though the Val- 
ley has repeatedly shown 
ability rebound new 
heights after deep economic 
downturns. The recent evi- 
dence, notably the surge 
offshoring, makes ask 
again about the Valley 
and the entire nation. 

And wonder something gen- 
uinely different now. 

Intel CEO Craig Barrett put his fin- 
ger few weeks ago when 
stopped newspaper for long 
chat with some reporters and editors. 
persuasive way, the nature the 
global workforce. 

For the first time human history, 
Barrett said, truly gigantic pool 
well-educated, technically adept and 
eager-to-please labor being created. 


DAN GILLMOR is techno!- 
ogy columnist at the 
San Jose Mercury 
News. Contact him at 
dgilimor@sjmercury.com. 


This pool talent, which 
will include hundreds 
millions people China 
and India (many whom 
speak English fluently), has 
another characteristic: 
willingness work for 
fraction what Americans 
expect. 

This not because they 
like living poorly. It’s be- 
cause local conditions and 
currency exchange rates 
make what would seem like 
pauper’s salary here 
highly attractive one there. 

The U.S. largely came grips with 
similar crisis low-end manufactur- 
ing. moved the value chain 
society, painful this was for the less- 
educated, hardworking people who 
lost middle-class jobs and had settle 
for lower-paid service employment. 

How high can move the value 
chain now? 

travel widely. One thing know for 
sure that Silicon Valley and the U.S. 
have monopoly brains energy. 


é 


culture risk, entrepreneurialism. 
But other places are beginning 
adopt even that value, too. 

The spectacle politicians promot- 
ing trade wars the name stem- 
ming job losses disturbing, under- 
standable. wish they’d devote that en- 
ergy telling the harder truth: that the 
will need buckle down un- 
precedented ways, with vast new in- 
vestments education and infrastruc- 
ture, plus commitment the 
best aspects entrepreneurialism. 

may facing big trouble the 
near term, matter what do. 
the kind news few politicians 
dare deliver. 

Barrett, running for office, offered 
a hard truth. As he gave his litany of 
why conditions truly are different this 
time, asked this suggested gen- 
eration lowered expectations the 
US. “It’s tough come another con- 
clusion than that,” replied. 45077 
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Savvy Users Will Drive Linux Adoption 


IMM FOX right that 

Linux strategy good one 
Super Bowl Ads Help Linux,” 
QuickLink 44474], but left out 
important reason. 

Those who remember the 
Microsoft client/server takeover 
mainframe-centric business- 
computer market know that 
come about result corporate 
strategy. came about because 
Windows provided comfortable 
and easy-to-use environment 
which groundbreaking tools like 
WordPerfect, Lotus 1-2-3 and 
dBase could generate real produc- 
tivity improvements and cost sav- 
ings, and because the peer-to-peer 
networking Windows for Work- 
groups allowed end users work 
quickly and cooperatively with 
shared data without hassling with 
the corporate red-tape mill. 
adoption Microsoft software and 
the new architecture was really dri- 
ven survival instincts. 

The point that adoption was 
driven from the desktop, not from 
the boardroom the depart- 
ment. why makes sense 
evangelize the masses. also 
why think Red recent abdi- 


cation the desktop others was 
a stunning strategic error. Linux 
adoption will heavily driven 
techno-savvy end users who under- 
stand the philosophical and eco- 
nomic reasons behind open-source. 
the desktop comes green box, 
so will the server software. 

George Yeager 

Chief technology officer, 
Columbus, Ohio 


Loss Prosperity 


N MACROECONOMIC terms, for- 

eign outsourcing is nothing more 
than profiteering the spread be- 
tween the wages and benefits paid 
U.S. workers and the wages 
the most desperate and vulnerable 
people earth who can herded 
into office buildings Third World 
economies. 

political terms, foreign out- 
sourcing the most blatant attack 
rights and the most se- 
vere threat the existence the 
middle class and the Social Security 
system U.S. history. 

sociological terms, foreign 
outsourcing will result dramatic 
polarization U.S. society, divided 


between the massive numbers who 
will see their livelihoods ruined 
outsourcing and the wealthy few 
who will profit immensely from it. 

Great men the past built so- 
ciety that the envy the world 
inventing ways increase the 
level prosperity enjoyed all. 
Now cadre intellectual and 
moral midgets has discovered how 
profit strip-mining that hard- 
won prosperity. 

Pardon and few others 
celebrate their little discov- 
ery regard these business 
experts cynical, shortsighted, 
self-serving fools. 

John Powers 
Software engineer, General 
Dynamics Corp., Fairfax, Va. 


olitical Shuffling 
AVID MOSCHELLA describes 
Sen. John condemna- 
tion job outsourcing mere “po- 
litical rhetoric” [“Political Rhetoric 
Has Run Amok,” QuickLink 
How would describe the state- 
ment Greg Mankiw, chairman 
the White House Council Eco- 
nomic Advisors, that this practice 
good for America? Kerry may mere- 


making campaign promises, 


| 


but thousands laid-off workers 
can hardly find comfort insensi- 


| tive statements from the White 


House. Moschella seems ignore 
that cruel statement the govern 
ment, while criticizes Kerry for 
defending American workers. 
Bassey Essien 

Systems administrator, Atlanta 


0 SEN. KERRY criticizes loop- 

holes that let “some Benedict 
Arnold CEO” send jobs over 
Well, who put those loopholes into 
the law? suspect was the U.S. 
Congress, passing more special- 
interest legislation. 
Charles Lingo 


Denham Springs, La. 
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Visual 2003 can cut development time 
two-thirds, giving you more time think. 


Got big idea? Visual Studio® .NET 2003 delivers higher 
productivity, helping you turn that big idea into reality 
faster than you ever thought possible. Want proof? 
Visual Studio .NET enabled Xerox Global Services 
bring the v2.0 release its CentreWare Web software 
market one-third the time compared their 
previous development platform. find out how Visual 
Studio .NET 2003 can help you quickly turn your big 
ideas into reality, visit msdn.microsoft.com/visual/think 
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Q&A 


Preparations 

The CEO the largest Web hosting outfit 
Europe tells Computerworld what tech- 
nology his company uses serve its cus- 

tomers and what thinks Web hosting 

company can for businesses. Page 


DEVELOPING ADVANCED 
ANALYTICAL MODELS HELP 
CONTROL COSTS, IMPROVE SERVICE 
AND IDENTIFY BUSINESS OPPORTU- 
NITIES. GARY ANTHES 


McCall Goodman say traditional industry tools took 


Putting the New News 
the future, news delivery 
involve interactive multimedia 
presentations featuring content 
tailored the tastes individual 


SECURITY JOURNAL 
This Your Attacker Calling 


Hacker attacks computer net- 
works get all the attention, but 
Vince Tuesday finds that social 
engineering ploys phone are 

difficult challenge. Page 


UMANA INC. says it’s leading 

the health benefits industry 

into new world which the 

focus will shift from employ- 
ers, doctors and hospitals, where has 
been for decades, consumers. The 
company says can better serve its mem- 
bers giving them greater choice and 
greater control over their health and 
health benefits. 

But giving consumers choices 
and pricing those choices optimally 
requires analytic tools unprecedented 
sophistication make sense terabytes 
health care data. Humana developing 
such tools and eventually hopes patent 
them. Its tools use algorithms developed 
jointly epidemiologists, engineers, 
economists, mathematicians and liter- 
ally rocket scientists. 

consumers are the top Hu- 
strategy pyramid and analytic 
models are the middle, then computer 
technology forms the base. The $13 bil- 
lion, Louisville, Ky.-based company has 
put together infrastructure that 
serves data analytic modelers and 
recycles the results those models back 
into 3.5TB data warehouse. The data 
store supports vast array users, in- 
cluding claims processing and billing per- 
patients’ employers, doctors and 
hospitals; the rocket scientists; personal 
nurses working from home; and Hu- 
mana’s 6.8 million consumers medical 
insurance and medical care. 

“The purpose the industry the 
past was generally unlinked the end 


REFOCUS 


user,” says Dr. Jack Lord, physician and 
Humana’s chief innovation officer. “It 

tended focus itself, and employ- 
ers acting sort benefactor role 
employees. The result was consumer 
and public push-back.” 

was simpler world then, Lord says, 
one which health insurance companies 
managed costs “supply-side interven- 
tions” with employers, doctors and hospi- 
tals. Traditional actuarial tools were quite 
adequate. say, ‘I’m going forecast 
tomorrow’s weather based 
was always historic look,” says. “If 
you live that space, you never want 
move; but you stand stili, you can never 
influence the net cost health care.” 

Now the name the game “choose 
and use,” says Carol McCall, director 
the Center for Health Metrics Hu- 
mana’s Innovation Center. Humana has 
models formulate and price health in- 
surance plans. These predict who will 
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ANALYTIC 
ENGINES 
DELIVER 
INSIGHTS 


insight engines apply ana- 
lytic models 3.5TB customer, 
claims and other data identify mar- 
kets, enhance products and predict 
costs. The following are the four en- 
gines Humana has completed, plus 
fifth, SimHeaith, that’s development. 


SmartStart 

GOAL: Predict the consumer's 
choice benefit plan; explore bene- 
fit/contribution strategies. 


APPROACH: Models consumers 
“rational agents” that evaluate 
plans and trade off costs, benefits and 
risks pick the best plan. 


Predictive Modeling 
Predict future high-cost 
members; improve 
customer relations. 


APPROACH: Combines medical 
knowledge, engineering methods 
(asynchronous signal processing, 
nonlinear dynamic time series) and 
computer science algo- 
rithms, advanced visualization). 


Impact Tool 
Evaluate effectiveness 
programs; analyze consumer behavior. 


APPROACH: Creates control 
and test groups the fly for dynamic 
analysis clinical and financial 
results. 


Insight Tool 

Enhance pricing and under- 
writing competitiveness; early detec- 
tion trends. 


APPROACH: Uses historical data 
and predictions individuals’ future 
health identity patterns and drivers 
health care costs, including early 
trend and anomaly detection the 
employer, market and provider levels. 


SimHealth 
GOAL: Simulate consumer choice 
and behavior via self-evolving models. 


APPROACH: development 
now, uses “rules the 
game” (weighted consumer objec- 
tives) evaluate different benefits- 
scenarios. Evolves us- 
ing the results other models, genetic 
algorithms and agent-based modeling. 


choose given program, how they will 
use and what will cost the compa- 
ny. Humana even has model that pre- 
dicts who will become catastrophically 
ill can intervene and try head 
off those illnesses. Although Humana 
has not yet published the results, 
says the new model has already shown 
costs savings for the company while 
saving money and improving health 
for the at-risk members. 

This year, Humana plans develop 
which draws these 
predictive and analytic tools, that 
could send the company directions 
can’t present anticipate. For exam- 
ple, the could discover 
major customer grouping that has 
been overlooked. 

The models more than simply ex- 
trapolate from the past using classical 
statistical methods such regression, 
according McCall. “There need 
new disciplines around predictive 
and behavior sciences,” she says. In- 
deed, McCall’s group using com- 
plexity theory, agent-based modeling, 
genetic programming and other “new 
science” esoterica. also uses Markov 
models, Bayesian learning networks 
and pattern recognition techniques 
borrowed from military and space pro- 
grams, which torrents data are 
sluiced for tiny nuggets information 
that may good predictors. 

McCall’s group has developed four 
predictive and analytical models that 
calls insight engines. This year, it’s 
working fifth model, called Sim- 
Health, that will combine results from 
the other models. Rather than making 
static predictions, SimHealth will pro- 
duce scenarios that evolve during the 
simulation. 

“It’s one those things where no- 
body knows the answer, but 
know when they see it,” McCall says. 
“So you want use called inter- 
active evolution. You have model 
it’s like SimCity and you run scenar- 
ios. You say, like that scenario, and 
you press the big button and evolve it.” 


Common Vision 

Bruce Goodman, senior vice presi- 
dent and chief service and information 
officer, says one the challenges 
faced when came Humana five 
years ago was figuring out how pull 
together information from many differ- 
ent stovepipe systems, integrate and 
position for use number con- 
stituencies. “We had multiple claims 
systems and multiple administrative 
systems, one the challenges was, 
how you provide single view for 
each the stakeholders?” says. 


The answer was two huge, integrat- 
data stores, one feed Web por- 
tal and one for the modeling communi- 
ty. elaborate extract, transform and 
load (ETL) process developed feed 
the data repositories. “We decided 
which data elements needed for the 
stores] and pulled those systems 
together could promote the 
common view, even though have 
disparate systems under the covers,” 
Goodman says. “We were able make 
transparent the true underlying com- 
plexity our systems environment.” 

The operational data store (ODS), 
e-business data mart, drives Hu- 
mana’s Web site, single portal with 
separate, secure entrances for mem- 
bers, corporate customers, providers, 
agents, business partners and employ- 
ees. The MVS-based ODS holds 
months data 1.8TB 180 million 
DB2 database rows about providers, 
employers, members and their medical 
and pharmacy claims. 

While the ODS is just for Web users, 
the real information engine Humana 
the AIX- and Oracle-based enter- 
prise data warehouse (EDW), com- 
plete set data assets used run the 
business,” according Bruce Sterpka, 
vice president for corporate informa- 
tion management Humana. The 
EDW holds some 3.5TB of data, and 
the largest of its 432 tables, the table of 
medical claims, has 430 million rows. 

The central function Humana 
claims processing, where members 
seek reimbursement for millions 
medical and pharmacy outlays each 
month. Claims byproducts, which 
the people and modelers call data 
“exhaust,” include diagnostic codes, 
severity codes and other information 
that the modelers extract and use 
predict illnesses, benefits-plan usage, 
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costs and other variables. 

Cobol job periodically extracts the 
exhaust data from the EDW for the 
modelers Humana’s Center for 
Health Metrics. The models run 
two four-processor Windows 2000 
Server machines the center. Results 
are stored the modelers’ own net- 
work-attached storage system before 
being sent back, via file transfer proto- 
col, the EDW for recycling into other 
models and the ODS for Web access. 

Modelers code and test their models 
using custom and C++ code and the 
MATLAB development tools from The 
MathWorks Inc. Natick, Mass. The 
models then IT. “Our key step 
take what they’ve developed and in- 
dustrialize it, make bulletproof 
and scale can run large 
amounts claims information 
through it,” Goodman says. 

will rewrite the models Java for 
production runs, says Ramu Kannan, 
director corporate information man- 
agement. That will make them more 
modular and will also make them capa- 
ble providing real-time visualization 
model output the Web, says. 

has invested million the 
modeling work far and has eight 
people supporting full time, Good- 
man says. “IT well aligned with 
the business,” says. “We anticipated 
what had make the data ac- 
cessible ... enable the business 
really take advantage the technology 
and move forward.” 44722 


OVERWHELMING ETL 


When commercial ETL tools couldn't scale to 
Humana’'s needs, the company built its own: 
QuickLink 44719 


Healing the Healthy: Predictive modeling helps 

Humana treat customers before they get sick: 
QuickLink 44720 
www.computerworld.com 
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PREPARATIO 


largest Web hosting company 
rests its business ona solid technology base. 


Already the biggest Web hosting compa- 
Europe, 1&1 Internet Ltd., mak- 
ing move into the U.S. market. The 
first step was audacious program 
launched October that offered 1&1’s 
hosting service free those who signed 
within limited time. The tactic 
worked that garnered the company 
150,000 new customers, but seriously 
strained support resources, accord- 
ing CEO Andreas Gauger. 

Offering the Karlsruhe, Ger- 
many, company’s products 
attractive price and establishing 
its brand are Gauger’s current 
priorities, and says those efforts must 
rest rock-solid technology. The com- 
pany operates four European data cen- 
ters with about 22,000 high-end servers 
running Juniper/Cisco network 
backbone. With temporary data center 
New York, building its first U.S. 
facility this year. 

conversation with Computer- 
world’s Tommy Peterson, Gauger ex- 
plains the technology necessary pro- 
vide 99.9% uptime millions cus- 
tomers and what thinks Web host- 
ing company can for businesses. 


How many customers you have world- 
wide? About 2.8 million for all prod- 
ucts. About half those are Web host- 
ing customers that’s not exact. 


lot customers serve. What kind 
technology you run? Everything 
from electricity fire protection are 
completely automated processes. 
Everything state-of-the-art and very 
redundant. Even our cooling systems 
are completely redundant. For the U.S. 
customers, we’re collocated U.S. 
data center that’s pretty good too. But 
will build buy our own data cen- 
ter the U.S. this year. 

have about 20,000 servers run- 
ning right now our data centers. 
have two parts the technology. One 


part the Linux-based technology, and 
the other Microsoft-based products 
serving the Microsoft base. 

have about 95% our products 
based our Linux technology. 
have completely rewritten everything 
Linux suits our needs mass 
hosting company with thousands 
servers. 

eight years, have developed 
base Linux operating systems, 
with file systems, with process 
scheduler anything that will 
make one thing happen, give 
very stable, cost-effective sys- 
tem. use only standard hard- 
ware. don’t have one big machine 
for anything just collections PCs, 
thousands them. top that, our 
own Linux distribution running that 
optimized for massive parallel host- 
ing. the Microsoft side, use the 
newest version Server 2003, and 
then have some additional adjust- 
ments and some software use 


TECHNOLOGY 


make hardware run better but you 
know you cannot change too much 
about Windows. Then have host 
Exchange clusters, SQL Server clusters. 

low price, you have have systems 
that run everything very profession- 
al, everything administered 24/7. 


technology something you view key 
for the company? It’s two things. One 
thing the technology from the per- 
spective that should rock-solid. 
you want conquer mass markets, 
you have have low price. the oth- 
side, are also very innovative, 
the features include our Web 
hosting product that broad range, 
have never seen anything like them 
from competitor the U.S. offer 
very sophisticated Web statistic tool 

[and] for the price point, there’s 
other offering like that. 


for the technology you run on, you’re 
looking for dependability and capacity, but 
for the products and services you offer 
the customer, getting your edge with 
innovation? The cost our hardware 
very important us. don’t buy 
big Sun machines, don’t buy Net- 
Apps filers They are far too expensive. 
And 90% the software use de- 
veloped our shop; it’s very cost- 
effective. 


What products and services are you offering 
now? are offering complete range 
personal Web hosting products, in- 
cluding domain registration and e-mail 
options for very low money. And then 
complete Web hosting plans with very 
aggressive pricing, dedicated 
servers and e-commerce shopping sys- 
tems you can buy everything you 
need small company opena 
business the Internet. Medium-size 
companies can use our packages, our 
dedicated servers, for example, save 
money and have very good service. 


Are you giving companies CRM tools well 
hosting their entire CRM operations? Not 
yet. far only the shopping cart and 
the catalog [are] the Internet. 


it’s basically order and order fulfillment. 
Are you going offering CRM the fu- 
ture? don’t think will come the 
next month; maybe next year. are 
offering some parts right now 
where, for example, have new set 
tools through which you can send 
newsletter all your customers. And 
have tools where you can talk 
customers that are your Web site. 
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But completely integrated solution, 
that don’t have right now. 


What can you for large companies? 
Right now, they have any small proj- 
ects, they can them with for al- 
most cost. you want try out 
new idea about Web page any- 
thing, you can get from and it’s 
very good quality. 

But the other side that are of- 
fering dedicated servers for very low 
prices. big company deciding, 
“Oh, should host all the servers 
our office and drive our own data cen- 
ter just buy servers some- 
where else?” are very cost-effec- 
tive way get storage space, servers 
and security. you are software com- 
pany, you need have some service 
for downloads software over the 
Internet. You might not very cost- 
effective doing your own. 


you become low-cost testbed for com- 
panies? you ask what can 
for big companies, there’s always the 
need for testing get something run- 
ning and see how works and then 
maybe stay with because it’s going 
run faster with us. the other side, 
you need amounts servers band- 
much less expensive than what other 
providers can offer. Even you’re able 
maintain these services yourself, 
might better host them than 
keep them your own data center. 


How you handle support issues? one 
side, have FAQs the Net, 
you write e-mail, you also have 
through the FAQ. That’s how far 
our automation goes far. But you 
send e-mail you call us, there 
are always support staff ready an- 
swer your e-mail your phone call. 
They should always reachable 24/7. 

After our promotional free offer, we 
were little short [on service repre- 
sentatives], but are digesting that 
right now. the last day the offer, 
had 16,000 up-signs, that was not 
easy handle the support side. 
have people the U.S. who sup- 
port already. Germany and the U.K., 
have 300 400 overall. 


Are there legal and regulatory issues that 
you have deal with? Not all. There 
are rules for Web hosting. 44974 


THE U.S. CHALLENGE 


For Gauger's thoughts on the challenges of breaking 
into the U.S. market, visit our Web site: 
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Our overweight 
database was 
months away from 
crashing due 
exceeding our 
production disk- 
space capacity. 


LARRY CUDA, GLOBAL DATA ARCHIVING 
AND MIGRATION PROJECT LEADER, 
KENNAMETAL INC. 


Best practices database archiving 
help maintain healthy disk-space 
and prevent performance 
problems. Drew Robb 


IKE WAISTLINES, databases 
almost always grow much 
larger than their owners 
ever imagined. Instead 
too many carbs, it’s reg- 
ular diet stodgy and 
unnecessary transactional information 
that leads database obesity. Serious 
health problems can result, such dis- 
appearing disk space, poor performance 
and screaming users upset about slow 
access rates queries timing out. 


“Our overweight database was 
months away from crashing due ex- 
ceeding our production disk-space ca- 
pacity,” says Larry Cuda, global data 
archiving and migration project leader 
Kennametal Inc. Latrobe, Pa. 
“Management determined that 
could longer just keep throwing 
more disks the problem.” 

His SAP database was swelling 
rate 27GB per month until Kenna- 
metal pared down using eCONtext 


from Ixos Software Grasbrunn, 
Germany. Transactions that used 
take six seconds now take one, and the 
company saves estimated $700,000 
annually terms hardware acquisi- 
tion costs alone, according Cuda. 
The database maintains trim 2TB fig- 
ure, with another terabyte residing 
rapid-access archives. The company 
has HP-UX 64-bit environment for 
its SAP ERP applications well its 
Oracle 8.1 database. 

With many competing production 
demands and differing U.S. and inter- 
national data retention regulations 
consider, archiving database informa- 
tion never quick fix. Companies 
must decide what they should archive, 
how they should about it, which 
tools are available and which best 
practices apply. 


Losing Wait 

According Meta Group Inc., data 
growing rate 125% per year, yet 
80% this data remains inactive 
production systems, where crip- 
ples performance. “To compound this 
problem, many enterprises are the 
midst compliance initiatives that re- 
quire the retention more data for 
longer periods time, well con- 
solidation projects that result signif- 
icant data growth,” says Charlie Garry, 
senior program director Stamford, 
Conn.-based Meta Group. 

laundry list regulations makes 
any archiving endeavor extremely 
complex affair: The Sarbanes-Oxley 
Act, SEC Rule 17a, the Health Insur- 
ance Portability and Accountability 
Act and host other rules have 
transformed information management 
into minefield potential liability. 

The legal ramifications not having 
way archive information from 
databases can grim. But there are 
also production reasons for formulat- 
ing and activating archiving strate- 
rapidly. Apart from running out 
disk space Kennametal experienced, 
companies report problems such 
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total system outages when the database 
requires too much processing, backup 
failures when there’s too much data 
back the available window, and 
transactions timing out they search 
through millions records. 

Southwest Gas Corp. Las Ve- 
gas, inventory tables contained mil- 
lion rows and human resources table 
included million rows. “The more 
data you have production, the slow- 
the database grows,” says Luca 
Cotrone, systems analyst South- 
west Gas. “Users complained 
queries taking long time.” 

Cotrone implemented Applimation 
Archiver from Applimation Inc. 
New York for Oracle8i database that 
was growing rate per 
month. The database has now stabi- 
lized about Archiving one 
general-ledger table, for example, 
saved 18GB. Searches are down from 
several minutes few seconds. 

Unlike Kennametal, which sets 
cies for archive automation, Southwest 
Gas relies manual archiving. Each 
month, database adminis- 


Database Archiving Advice 


surement and monitoring business 
Beaverton, Ore. “International finance 
regulations also meant that legally, 
purging would have paralleled 
archiving.” 

Since the company operates 
countries, decisions about what 
archive its database were 

very complex. Take the case 


trator spends minutes se- 
lecting files archive. The 
decision based the age 
the files the inventory 
application database. For 
example, those that are old- 
than months could 
moved from the production 
system the less expensive Applima- 
tion data store. These files can ac- 
cessed the user transparently from 
the original application. 


Tape Not the Answer 

Running bulging database rarely 
desirable option, and most cases 
neither purging onto tape once 
common practice. With purging, re- 
covery must performed manually 
and extremely time-consuming. 
“Once you purge Oracle, users no 
longer have access the data,” says 
Lois Hughes, senior business systems 
analyst Tektronix Inc., test mea- 


SUCCESS STORY 


To find out how one company 
halted a decline in perfor- 
mance by archiving its Oracle 
database, visit our Web site 
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accounts receivables, just 
one dozens applica- 
tions operation: China 
requires retention data 
for years; Brazil, 10; Italy, 
seven; and the U.S. only 
three. top language 
and data-retention issues, 
the system also had cope with dif- 
ferent character sets for Asia. 
Tektronix archives transactional 
data every three months using Live- 
Archive from OuterBay Technologies 
Inc. Campbell, Calif. First, informa- 
tion recategorized reduced pri- 
ority within the existing Oracle in- 
stance then it’s moved less ex- 
pensive infrastructure. The users, 
however, are able access all data 
from one screen, without headaches. 
OuterBay one four primary con- 
tenders eyeing piece the billion 
archiving market-share pie. According 
Gartner Inc., Princeton Softech Inc. 


Princeton, leads the pack with 
more than 50% the market. Along 
with second-place OuterBay, ad- 
dresses IBM, Informix Corp., Sybase 
Inc., Microsoft Corp. and Oracle data- 
bases. Applimation focuses Oracle, 
while Ixos Software deals exclusively 
with SAP and Siebel Systems Inc. 


Archiver Beware 

managers taking archiving proj- 
ects face their fair share problems. 
Hughes reports several bugs Oracle 
purging functions that had ad- 
dressed, while Cotrone ran into trou- 
ble caused between Or- 
acle8i and 9i. His system runs Ora- 
cle8i, but the archive database runs 
Linux server instance within 
IBM mainframe. Each successive evo- 
lution Oracle and its associated ap- 
plications appears add more com- 
plexity that could scuttle project. 

For example, the Oracle E-Busi- 
ness Suite adds 200 new modules and 
17,500 tables the application infra- 
structure. The same holds true for oth- 
database vendors. 

“We export files from our 
production database into the 
archive, there are certain tables you 
can’t send across,” says Cotrone. “For- 
tunately, our inventory application 
doesn’t have these tables, were 
able archive while complete 


migration everything else 9i.” 


Kennametal’s Cuda reports that 
got his project under control only 
when moved from technology- 
focused view archiving business 
process/legal approach and after 
had plotted out all 223 data objects 
within his SAP database. This showed 
him the dependencies that existed 
among data types and highlighted ex- 
actly how retire data minimize 
risk. For example, invoices 
archived until the corresponding 


shipping and delivery documentation 
denotes closed transaction. SAP, 
says Cuda, has mechanisms built 

that prevent retirement open 
transactions. 

His advice for any archiving project 
first head for the easy pickings. 
“Financial documents are striking 
that they have dependencies,” says 


Cuda. “Attacking such low-hanging 

fruit not only gives you significant data 
recovery, also gives your team 

sense victory and [it] highlights 

management and users that archiving 

beneficial the system.” 


ILM Revolution 


Not surprisingly, online archiving has 
become a major element in vendor in- 
formation life-cycle management 
strategies. EMC Corp. Hopkinton, 
Mass., has partnered with OuterBay 


integrate LiveArchive with EMC’s 


ControlCenter storage management 
tools part its ILM suite [Quick- 
Link 43165]. Other vendors are follow- 


ing suit, and the trumpeting about ILM 


reaching fever pitch. 

will result the optimal 
management information through- 
out its life, from creation and use 
archiving and disposal,” says Mark 
Lewis, executive vice president for 
open software EMC. “It isn’t just 
hype; it’s revolution.” Behind the fan- 
fare, EMC talks about road map 


achieving true ILM functionality. 


“The ILM buzz similar that sur- 
rounding virtualization months 
ago,” says Steve Duplessie, analyst 
Enterprise Storage Group Inc. 
Milford, Mass. estimates that will 


least another months before 


ILM moves beyond the hype and 
shows some merit the real world. 
Until then, it might be best to evaluate 
archiving tools their own merits. 
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IN THE 2002 MOVIE 
Minority Report, 
passenger sub- 
way train gets con- 
stantly updated news 
flexible, translucent, portable flat- 
panel device that carries with him. 

Although the movie takes place 
the year 2054, this vision the future 
news delivery may closer than 
think, says Rich Gordon, journal- 
ism professor Northwestern Univer- 
sity’s Medill School Journalism. 

“The buzzword for the future, 
matter what platform, interactive 
multimedia, which both represents 
user control well the multiple 
forms media incorporated into 
single format,” Gordon says. 

think, inevitably, portable devices 
are going have very different for- 
mat for storytelling than [via] the 
Web,” adds. 

Small devices such cell phones 
and PDAs today display mostly text. 
But, Gordon says, already see- 
ing number the portable platforms 
developing the capability take video 
and Flash stories, and can envision 
somebody riding the subway and view- 
ing video animation-based story 
their PDA.” Gordon envisions 
handheld device that will display fa- 
miliar-looking replica the print edi- 
tion newspaper magazine but 
will clickable and interactive and 
incorporate multimedia and video. 

“So imagine Sports Illustrated, 
when reading your Tablet 
PC, and you click the still photo 
close play the plate, and you'll see 
the video the close play ... and see 
actually unfold front you,” says. 


Total Immersion 

New forms and integrated media 
systems will revolutionize the methods 
for acquiring, packaging, organizing and 
delivering the news the not-too- 
distant future, says computer science 
professor Dennis McLeod. McLeod 
working the User-Directed News 
project the Integrated Media Systems 
Center the University Southern 
California’s Annenberg School for 
Communication Los Angeles. 

The UDN project exploring cus- 
tomized, interactive, multimedia, “im- 
mersive” news experiences which 
people will, three five years, ex- 
perience news events and stories 
rather than just read about them, 
says. 

“Say there’s big protest march 
the federal building,” McLeod says, 
“and happened yesterday, and 
have story package that basically al- 


lows the user in, look around 
different directions and choose what 
aspects the event most interest- 


head-mounted display, this approach 


allows users get sense that they are 
actually immersed within ongoing 
event, and puts control the news 
in the hands of the user, McLeod says. 

Immersive news integrates audio, 
high-definition video, animation, text 
and haptic technology that conveys 
sense touch, texture and tempera- 
ture the user, McLeod says. 


4 
q 
q 4 7 


“The haptic data technologies en- 
gage the sense touch the digital 
world communication,” says. 
“For example, user wears glove 
they would use touch virtual ob- 
jects, and try impart the feeling 
they would get they were actually 
touching the objects.” 

McLeod says will also possible 
present user with text-based sto- 
that’s customized fit that user’s 
stored profile such where lives 
what his interests are and/or his 
specific requests. For example, user 


STORIES THAT ARE PERSONALIZED, 


INTERACTIVE AND MULTIMEDIA. 


>\ NMA 
LINDA ROSE 


might request story slam-dunk 
play basketball great Michael Jor- 
dan. After receiving the request, the 
system would the knowledge 
base that describes the domain 
this case, sports bring generic 
story template about plays 
and then fill with information 
about slam-dunk plays Jordan. 


Readers Call the Shots 


“What will journalism look like 
three five years?” asks Paul Grabow- 
icz, New Media Center director the 
University California, Berkeley. 
combination audio and video and 
pictures and animation and graphics 
and text put together way peo- 
ple can explore story, where you try 
match the type media with the 
best way telling that story.” 

Grabowicz says users will enter 
story through various entry points, de- 
pending their interests. For in- 
stance, one reader might want focus 
the person story written about, 
while another might want read 
about the dateline that story. 

“The packaging story would cer- 
tainly have all the elements multi- 
media,” agrees Nora Paul, director 
the University Minnesota’s Institute 
for New Media Studies. “Some stories 
are better understood there are some 
good visuals them, people want 
follow story more closely, they can 
connect different types supple- 
mental material.” 

Paul predicts that “animated info- 
graphics” will describe series 
events such last year’s space 
shuttle accident difficult 
understand linear text presenta- 
tion. “With the animated infographics, 
you could see how the space shuttle 
spun, how was supposed right it- 
self and how started encountering 
problems,” she says. “And you [could] 
experience your own rate, over 
and over again.” 

Paul says that although this technol- 
ogy currently available, the news 
media yet using any great 
extent. “Online news has not really 
evolved much beyond slapping the 
legacy news story onto the computer 
screen,” she says. “They’re trying 
push [online more into the 
traditional legacy media production- 
line model rather than the handcraft- 
ing that’s required for really unique 
content.” 44939 


MORE ONLINE 


For resources related to the future of news delivery, go online: 


QuickLink 45145 
www.computerworld.com 
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SAP make much sense. Because designed with fast implementation mind, you can see business results quickly. 
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Protecting networks from hackers easy 
compared with guarding against social- 
engineering attacks. Vince Tuesday 


NETWORK that con- 

nects over 98% the pop- 

ulation. extends every 

country the planet and 
occasionally even into outer 
space. No, it’s not the Internet. 
It’s the telephone network. 
The phone system vital 
part company’s informa- 
tion infrastructure, but also 
offers nearly perfect venue 
for attack. 

It’s possible 
spoof your Internet 
address, but not you 
want packets make 
their way back you. 
that case, you have 
include your real 
address, and that means every- 
one between you and your tar- 
get and the target itself 
can get your address. 

the computer network, 
our intrusion-detection sys- 
tems can shift through giga- 
bytes data every second, 
plucking out malicious behav- 
ior. With attacks telephone, 
don’t have any easy way 
trace the origin malicious 

callers without involving the 
legal system, and must rely 
our staff spot and report 
incidents. 

E-mail and Web-based at- 
tacks can automated and 
launched against thousands 
targets. But the phone the 
weapon choice you have 
just one target mind. 

Buffer overflows and pass- 
word-guessing don’t work 
over the phone, more 
devious type attack re- 
quired one that involves 
so-called social engineering. 
social-engineering ploy, 
the attacker tries trick 
someone into doing some- 
thing wouldn’t normally do. 


SECURITY 
JOURNAL 


might take the form 
appeal from authority fig- 
ure. Someone could call and 
say needs confidential infor- 
mation for senior board mem- 
ber. Everyone wants look 
good front the bosses, 
staffer might provide the re- 


quested information without 


giving second thought. 
Advertising good train- 
ing ground for pick- 
ing approaches 
social engineer- 
ing. get many 
who try 
use peer pressure, 
dropping the names 
colleagues who 
have supposedly performed 
certain action already. 
everyone else is doing it, how 
bad can be? 


Cry for Help 


Some attackers play upon the 


sympathies their victims. 


One scammer who targeted 
claimed that she lost her 
laptop and needed confiden- 
tial company information for 
presentation she was giving 
few hours. Who couldn’t 
help but feel sorry for some- 
one caught such situation? 
But would you feel enough 
sympathy send spreadsheets 
and organizational charts 


Sometimes 
you have take 
lesson from the 

attackers’ playbook 
protect yourself. 


Attacker Calling 


her Yahoo e-mail address? 

Some tactics are just plain 
weird. had many calls 
from people who pretend 
work for integration com- 
pany. The company ex- 
ist, but people claiming its 
representatives regularly con- 
tact our staff say that 
next week install cord- 
less mice. The one thing they 
need before they can that, 
however, the part number 
the employee’s mouse. “Please 
turn over and read out the 
part number can check 
that you are the list for the 
upgrade,” the callers request. 

Luckily, our employees are 
pretty suspicious lot, and 
despite the customer service 
training they’ve received, not 
one has revealed this informa- 
tion. All have hung the 
attackers referred the call 
the help desk. 

Many our lines are re- 
corded for regulatory purpos- 
es, I’ve had the chance 
listen lot calls asking for 
mouse serial numbers. can 
normally construct some sce- 
nario that makes sense out 
social-engineering calls, but 
this case, don’t have the faint- 
est idea why this information 
might useful. Perhaps re- 
veals the hardware us- 
ing. But that’s the objective, 
and say, “Is your Dell work- 
ing today?” I’m almost sorry 
that our employees cut the 
calls short before they can get 
the next question. Perhaps 
the mouse information just 
icebreaker and the scam- 
mers plan ask for more sen- 
sitive information next. 

even considered set- 
ting special number 
which staffers could forward 
such calls. “Oh, I’ve got run 
meeting; let forward 
you assistant who can 
help,” staffers would say. Then 


trained staff could take the 
call and pretend helpful 
while trying extract infor- 
mation about tactics and mo- 
tives. almost doesn’t seem 
fair use social engineering 
ourselves, but sometimes you 
have take lesson from the 
attackers’ playbook protect 
yourself. 


Mydoom Revisited 

another note, we’re still 
working resolving prob- 
lems created the Mydoom 
virus. That virus didn’t get 
into our systems, but tens 
thousands infected e-mails 
attempted so. Our sys- 
tem stopped them all, only 
bombard the intended recipi- 
ents with alerts for each one 
44521]. 

provide monthly statis- 
tics our parent company 
about the number viruses 
stop our perimeter, and 
last month broke the rec- 
ord. Our contacts headquar- 
ters were both impressed and 
little shocked. They 
imagine what had caused the 
spike attempts. sent them 
e-mail explaining that 
was due Mydoom and pro- 
vided few Web links with in- 
formation about the virus. 

was certainly surprised 
that someone working secu- 
rity headquarters could 
have missed all the fuss sur- 
rounding that outbreak, but 
the reply e-mail was 
even more surprising. said 
that the staffers headquar- 
ters had found the links very 
useful. They learned lot. 
They even learned that some 
messages they hadn’t opened 
were copies the virus. 
looks like monthly report 
saved headquarters from 
Mydoom infection. I’ve passed 
recommendation that se- 
curity awareness improved, 
starting with the security 
group 


WHAT YOU THINK? 


This week's journal is written by a real 
security manager, “Vince Tuesday,” whose 
name and employer have been disguised 
for obvious reasons. Contact him at vince. 
tuesday@hushmail.com, or join the dis- 
cussion in our forum: QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 


Security Bookshelf 


Biometrics and Network 
Security, Paul Reid; 
Prentice Hall PTR, 2004. 


The ability 
measure unique 
biological charac- 
teristic indi- 
vidual and convert 
that information 
into electronic 
data that can 
used identify him 
is a powerful thing. 
The technology this 
just now the verge matu- 
rity, says Paul Reid, and his 
book makes compelling case 
that it’s time take biometrics 
into the corporate mainstream. 
contrast other books 
I've seen this topic, Biomet- 
rics and Network Security 
gives detailed examples how 
notto biometrics. Reid 
summarizes finger, face, voice 
and iris biometrics and com- 
pares them help readers 
identify the best option. This 
guide, not book 
that gets bogged down theo- 
ry. recommend anyone 
been asked under- 
take a biometrics pilot project. 
Vince Tuesday 


WLAN Security 

Software Updated 

Vernier Networks Inc. Moun- 
tain View, has released 
Vernier Networks Systems 
The software for managing 
wireless LAN security runs 
the vendor’s 6500 series line 
WLAN security appliances. 
Features include centralized 
management console; new 
monitoring, reporting and user 
rights management capabili- 
ties; and the ability scale 
10,000 users per domain. 


Hexamail Guard 


Hexamail Ltd. has released 
version its antispam soft- 
ware that runs Microsoft Ex- 
change 2000 and 2003 e-mail 
servers. Hexamail Guard for 
Exchange filters spam, virus- 
es, Trojans and e-mail scams, 
according the Cambridge, 
England-based vendor. 
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BMC Updates 
Mainview Line 


BMC Software Inc. last month 
announced several revisions its 
Mainview product family for 
mainframe management. Main- 
view for Version 2.2 provides 
Internet Protocol pacing technol- 
ogy, which designed ensure 
that mission-critical Internet ap- 
plications receive priority access 
Houston-based BMC. Pricing 
starts $33,000. 


Tool Aids Exchange 
Administration 


Aelita Software Corp. has re- 
leased Aelita Collaboration Ser- 
vices for Exchange. These new 
tools are designed make eas- 
ier for Exchange administrators 
to set up secure synchronization 
global address lists compa- 
nies that use multiple, separate 
Exchange deployments, accord- 
ing Dublin, Ohio-based Aelita. 
Pricing starts per user. 


Unimax Rolls Out 
Support for Cisco 


Unimax Systems Corp. Min- 
neapolis announced last week 
that its 2nd Nature software for 
Cisco’s Call Manager IP-PBX and 
Unity voice-mail systems will 
released this month. The 2nd Na- 
ture unified system management 
interface concurrently supports 
new telephony systems such 
Cisco’s products, well 
legacy PBX and messaging sys- 
tems. Pricing wasn’t available. 


VMware Upgrades 
GSX Virtual Server 


VMware Inc. Palo Alto, Calif., 
has released upgrade its 
GSX Server virtual server soft- 
ware that allows memo- 
per virtual machine support 
larger applications. also adds 
teamed network adapter support, 
and improved CPU, disk and net- 
working performance, VMware 
said. Pricing starts $2,500. 


NICHOLAS PETRELEY 


Why Free Beer 
Speec 


SPIRIT OPEN-SOURCE might once 

have been summed “share and share 

alike.” This philosophy has its roots 

the GNU General Public License (GPL), 

which the license for the Linux kernel 
(the operating system engine) and most the core 
operating system utilities that come with Linux. 

The GPL basically reciprocal agreement. you 
improve add GPL program, you build 
application that includes software licensed under the 
GPL, then you must make the source code for your ap- 
plication available, too. Share and share alike. That’s 
not say you can’t sell GPL software; you can. Put 
simply, the Free Software Foundation promotes the 


concept software that 
free “free speech,” 
not necessarily free 
“free beer.” Free means 
open and unrestricted 
pre-existing proprietary 
claims; doesn’t mean 
without cost. 

According the most 
recent Evans Data Corp. 
survey Linux developers, 
however, people are more 
interested free beer than and 
they are free speech. 

Given human nature, that 
shouldn’t surprising, but 
runs contrary the original philos- 
ophy open-source software. 

For example, the developers sur- 
veyed have clear preference for soft- 
ware built with the tool kit over the 
competing tool kit, GTK. 

They clearly see the superiority 
software built with over software 
built with GTK. But when asked which 
tool kit they use build their own 
software, the majority chose GTK. 
While there are alternate explanations 
for some this seeming contradic- 
tion, other data the survey suggests 


ant and author 
as City, Mo., 


this all about money and 
licenses. 

Here’s the crux the 
matter: It’s illegal create 
and sell proprietary ap- 
plication based GPL 
code. Given the reality 
that people are always go- 
ing create proprietary 
applications, developers 
invented some license 
compromises that make 
possible build propri- 
etary applications 
open-source foundations. 
These compromises usual- 
fall into one two categories call 
“quid pro quo” licenses and “free 
beer” licenses. 

Quid pro quo licenses are condition- 
licenses, often called dual licenses. 
These licenses have GPL-like condi- 
tions for those who want write free, 


ng editor of 

rg. He can 
at 

streley.com 


| 
open-source software, but they require 


developers pay license fee cre- 
ate for-profit proprietary applications. 
has such dual license. Those who 
use build proprietary, for-profit 
applications have buy developer li- 
censes from Trolltech, the inventors 


Qt. But the people who used 
build KDE, KDevelop and all the other 
top-rated software didn’t have pay 
use Qt, because KDE, KDevelop and 
are all open-source and free. 

Free-beer licenses make possible 
incorporate open-source code into 
proprietary for-profit application 
without any financial obligation. 

The widget tool kit GTK available 
under the Lesser GPL, meaning you use 
GTK build open-source propri- 
etary applications with obligation 
publish your source code finan- 
cially compensate the authors GTK. 

Quid pro quo licenses are ethically 
consistent. Open-source developers 
can use the software for free, but they 
must contribute their work back into 
the open-source pool software. 
Share and share alike the source code. 
Other developers can use the software 


for profit, but they must financially 


compensate the company whose hard 
work they’re leveraging for profit. 
Share and share alike the profits. 
Free-beer licenses, the other 
hand, are ethically inconsistent. They 
enable exploit the hard 
work others for profit without giv- 


| 
ing anything back the way source 


code money. most, some these 
licenses require developers include 
copyright otherwise credit the 
original authors. 

why would anyone work free- 
beer software amounts volun- 
teering exploited? doubt the 
developers free-beer software like 
GTK get some gratification from 
knowing their work the most fre- 
quently chosen, even the choice has 
little nothing with the quality 
their work. And nobody com- 
pelling them contribute free-beer 
software. That’s yet another aspect 
free: free will. 45159 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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SOMPET! SHARP AR- 


he best way to stay ahead is to double 
your productivity. Introducing 
scan technology from Sharp. Sharp's Digital 


magers with Scan? technology are designed to scan two- 


ning manuals and white 


papers can be 


Double your productivity with Scan? technology. 


In fact, it's 115% faster than any other product in its 
class. Not only is it like having double the help, it will also 
allow you to accomplish more tasks, in dramatically less 
time. Together with Sharp's integrated network 
management software and security features, your digital 
information is safe and workflow is fully optimized 

Visit sharpusa.com/scan2 or call 1-800-BE-SHARP for 


more information 


= DIGITAL 


The AR-M550, AR-M620 and AR-M700: 
- Operate at 55, 62 and 70 pages-per-minute 
- Fully integrated network ready digital copier/printers 


+ Include network management software and document filing capability 
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sided documents single pass 
Baar es anned, copied, emailed and digitally distributed quicker pis 


Q&A 

Stay Just Little Bit Longer 
Creative and flexible work policies for 
baby boomers nearing retirement age 
could head off impending skills 
shortage, say the authors Harvard 
Business Review article. This pool work- 
ers ready help fill the gaps. Page 


Career Watch OPINION 

Robet Half Technology’s spring The Peanut Butter Syndrome 

hiring outlook indicates that Bart Perkins says that you squeeze the central budget too hard, 
Windows administration you'll force the pent-up demand spill over into the budgets the 
great demand. And, BankOne business units. Page 
executive describes the 
types applicants he’s 
been hiring. Page 


ClOs are faced with 
confusing array 
quality frameworks. 
Here’s guide 
their strengths and 
weaknesses. 
Gary Anthes 


HOCKED AND AWED 
the industrial 
might Japan the 
1980s, U.S. companies 
got religion the 
quality religion. 
They rushed im- 
prove their business 
processes adopting host quality 
frameworks, like ISO 9000 for the en- 
terprise, Six Sigma for the plant and 
the Capability Maturity Model (CMM) 
for software engineering. 

Today, managers have bewilder- 
ing array quality disciplines 
choose from. Some, such as Six Sigma, 
ISO 9000 and the Malcolm Baldrige 
program, may dictated you 
your CEO. Others, such Control Ob- 
jectives for Information and Related 
Technology (CobiT), may imposed 
your auditors. And IT-focused disci- 
plines may originate your own shop, 
such CMM for software develop- 
ment and the Information Technology 
Infrastructure Library (ITIL) for 
operations and services. 

While there some overlap among 
these quality frameworks, most cas- 
es, they don’t conflict. Indeed, most 
large companies use two three 
them. For example, IBM uses ISO 
9000, CMM, ITIL, Six Sigma and sev- 
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SPECIFIC 


TCO: 

ITIL: 
CMM: 
CobiT: 


eral homegrown quality programs. 

Meanwhile, other equally sophisti- 
cated companies don’t use any 
them, preferring roll their own. For 
instance, MasterCard International 
Inc. has adapted parts number 
programs its own way doing busi- 
ness. underwent external assess- 
ment for CMM year ago and imple- 
mented some ideas from that, but 
hasn’t adopted the framework formally. 

“We have hybrid quality pro- 
grams,” says Sheryl Andrasko, vice 
president for systems development 
MasterCard. The program has reduced 
the development time for new soft- 
ware releases from months and 
has reduced the number software 
defects well, she says. 

Other companies, such Nortel 
Networks Ltd., say the choice should 
driven customers and partners. 
Nortel uses telecommunications- 
oriented version ISO 9000 because 
that’s what its customers use. 

For some companies, outside 
body’s stamp approval, such 
ISO 9000 CMM certification, the 
cachet that comes from Baldrige 
award, may important factor. For 
example, defense contractor may not 
able get work without high 
CMM assessment. And ISO 9000 
badge may requirement for doing 
business, especially outside the U.S. 

But company can overspend any 
these programs, says Matt Light, 
analyst Gartner Inc. “We have phi- 
losophy called ‘just enough 
says. “So roll your own and apply 
just where makes sense often the 
best choice for organizations that don’t 
have certification requirements.” 

Nevertheless, you should some- 
thing the quality front, urges Michael 


MODERATE 


9000 


Malcolm Baldrige 
award 


Scorecards 
HIGH 


tractio 


Ashworth, CIO the investment 
banking unit J.P. Morgan Chase 
Co. “All these things are just better 
ways doing the things that people 
says. “They are not mumbo jumbo; 
they are codified common sense.” 


Capability Maturity 
Integration (CMMI) 


Software 
Engineering Institute, 
Carnegie Mellon 
University 


The 
CMMI extends and 
combines the Capability 
Maturity Model for Software (SW-CMM), 
the Systems Engineering Capability Mod- 
and the Integrated Product Develop- 
ment Capability Maturity Model. SW- 
CMN collection best practices for 
software development and maintenance. 
allows companies assess their prac- 
tices and compare them those other 
companies. The SW-CMM measures 
process maturity, which progresses 
through five levels: Level (initial), 
(managed), (defined), (predictable) 
and (optimizing). 


Very detailed. Geared 
specifically software development or- 
ganizations. Focuses continuous im- 
provement, not just maintaining certi- 
fication. Can used for self-assessment. 


LIMITATIONS: address opera- 
tions issues, such security, change and 
configuration management, capacity 
planning, troubleshooting and help desk 


functions. Sets goals, but say 
how meet them. (For example, CMMI 
says requirements analysis but 
say howto requirements 
analysis.) 


For years, companies that wanted 
significantly improve their software 
development practices and 
merit badge for all the world see 
embarked long, hard road called 
CMM for Software, road map that 
can lead companies from state 
semichaos, where most are today, 
one marked the precision, repeata- 
bility and low error rates normally as- 
sociated with manufacturing assem- 
bly line. 

CMMI, recently unveiled the 
Software Engineering Institute, 
more comprehensive process-maturity 


framework that combines SW- 


CMM with broader disci- 
plines systems engineering 
and product development. 
The institute says will even- 
tually stop supporting SW- 
CMM favor CMMI. 

The shop J.P. Morgan 
Chase uses SW-CMM, while 
the company overall works 
under Six Sigma. got 
our development teams 
CMM Level and are pushing toward 
Level some cases,” Ashworth says. 

Ashworth says the move from Level 
Level brought with more reliable 
planning, application features are 

more likely right the first time, 
reducing costly rework. The invest- 
ment bank has seen the following addi- 
tional benefits, says: 

20% 25% reduction post- 
implementation defects. 

Reduced efforts support opera- 
tional systems because they are more 
reliable. “Emergency” releases fix 
bugs have fallen 60%. 

Better management globally dis- 
tributed projects because terminology 
and specifications are standardized. 

Better performance from suppliers 
because requirements are better speci- 
fied. 

Nevertheless, Ashworth cautions 
against “analysis paralysis” when 
comes evaluating the results 
CMM. “We found not useful 
spend too much time trying mea- 
sure things, rather than just doing it,” 
says. 

Motorola Inc. has software develop- 
ment units at all five SW-CMM levels, 
but most are Levels according 
Anthony Carter, director the Digi- 
tal Six Sigma program Schaumburg, 
Ill.-based Motorola. says that 
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groups reach Level they’ll migrate 
CMMI. The product development 
framework CMMI makes at- 
tractive choice for company that 
makes products such cell phones 
that contain software, says. 

The organization Capital One 
Financial Corp. McLean, Va., 
Level and plans reach Level 
the end this year and Level the 
end 2005, says Ray Frigo, vice presi- 
dent management services. But 
unlike, say, defense contractor that 
wants become certified high 
CMM level order sell the Pen- 
tagon, Capital One doesn’t feel com- 
pelled follow CMM disciplines 
the letter. 

“We developed process framework 
provide repeatable, consistent deliv- 
ery,” Frigo says. “We are picking and 

choosing elements CMM 
and using CMM scoring 
assess where need de- 
velop processes.” 

Moving from one maturity 
level the next can entail 
two years more hard 
work, and some cases, it’s 
not worth the effort, users 
say. For example, Allstate In- 
surance Co. wants move 
from Level Level and 

stop there. “We really don’t see the 
need Level 5,” says Robin 
Richmond, assistant vice president 
Allstate Protection Technology. “We 
can see payback from getting Level 
and are hoping for speed mar- 
ket, efficiencies and improved quality.” 

And Richmond says she mi- 
grate CMMI anytime soon. “It’s very 
difficult find people with experi- 
menters,” she says. 


Control Objectives for 
Information and Related 
Technology (CobiT) 


Information 
Systems Audit and 
Control Association 
and the Gover- 
nance Institute 


oriented set for 

processes, practices and controls. 
Geared risk reduction, focusing 
integrity, reliability and security. Addresses 
four domains: planning and organization, 
acquisition and implementation, delivery 
and support, and monitoring. Has six ma- 
turity levels, similar 
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Good checklists for IT. En- 
ables address risks not explicitly ad- 
dressed other frameworks and pass 
audits. Can work well with other quality 
frameworks, especially ITIL. 

LIMITATIONS: Says what but not 
how it. deal directly with 
software development services. 
Doesn't provide road map for continuous 
process improvement. 


Lance Turcato, managing director 
for technology infrastructure and se- 
curity oversight Charles Schwab 
Co., calls CobiT “an governance 
tool” help managers understand 
what controls are needed and how 
measure the effectiveness those 
controls. “There’s audit tool that’s 
part it, that auditors can audit 
against those same criteria,” adds. 

CobiT takes considerable effort 
integrate into company’s processes. 
“The statements CobiT are very 
generic, had turn into 
people could under- 
stand it,” Turcato says. “The biggest 


challenge was getting everyone buy 


into it. What had determine 
who are the appropriate people 
throughout the technology group that 
own these controls and educate them 
in CobiT.” 

Lockheed Martin Corp. has four 
units CMMI Level also uses Six 
Sigma and ISO 9000 disciplines var- 
ious parts its organization, but 
CobiT the “umbrella quality frame- 
work,” says CIO Joseph Cleveland. 
says provides useful checklists 
each its four domains. 

For example, says, for something 
simple adding the BlackBerry PDA 
the company’s catalog approved 
devices, CobiT will ask whether there’s 
help desk support for it, whether secu- 
rity has been addressed, whether pro- 
cedures are place acquire and 
maintain the device and on. 

Cleveland says CobiT fits nicely 
with CMMI, with CobiT pinpointing 
the need for certain controls and 
CMMI putting them into place. Audi- 
tors’ questions can often satisfied 
pointing aspects CMMI, says. 


Infrastructure 
Library (ITIL) 


The U.K. 
Office Government 
Commerce, Pink Ele- 
phant Inc. and others. 


Best 
practices for service 
management and opera- 
tions (such service-desk, incident, 
change, capacity, service-level and secu- 
rity management). Especially popular 
Europe. 


Well established, mature, 
detailed and focused production 
and operational quality issues. Can com- 
bine with CMMI cover all IT. 


address the de- 
velopment quality management sys- 
tems. Not geared software develop- 
ment processes. Use highly dependent 
interpretation. 


While CMM the facto quality 
standard for software development 
processes, ITIL for many the tool 
choice for the operations and infra- 
structure side IT, particularly for 
services. 

Capital One rolled out ITIL pro- 
gram for internal and external cus- 
tomers 200] the wake very rapid 
growth accompanied increasing 
number “service interruptions,” says 
Gregory Gannon, vice president tech- 
nology delivery. 2003, Capital One 
had reduced “production incidents” 
such system crashes and software- 
distribution errors 30% and had 
reduced “business-critical” “Severi- 

ITIL tracks problems service 
areas such help desk, applications 
support, software distribution and cus- 
tomer-contact system support, and 
overlaps CMM certain areas such 
configuration management. For exam- 
ple, Gannon says, ITIL tracks the 
changes made operational systems, 
but the quality those changes 
terms the number and severity 
problems resulting from them 
more CMM metric. 

ITIL facilitates analysis 
problems, Gannon says. “We used 
pretty service restoration, 
but the reason had much 
service restoration was because 
were restoring service, but not fixing 
the problem,” adds. 

ITIL isn’t substitute for ISO 9000, 
Gannon says, because ISO 9000 


more relevant certification proc- 
esses. Capital One has some Six Sigma 
efforts under way, but they’re more 
the business side the house than 
the side, adds. 


Six Sigma 
Developed 

Motorola Inc. 


tical process-improve- 
ment method focusing 
quality from cus- 
view. Defines service levels and measures 
variances from those levels. 
through five phases: define, measure, ana- 
lyze, improve and control. The Design for 
Six Sigma variant applies this 
principles the creation defect-free 
products services, rather than the 
improvement of existing ones. 


data-driven approach 
finding the root causes business prob- 
lems and solving them. Takes into ac- 
count the cost quality. IT, best ap- 
plied for relatively homogeneous, repeat- 
able activities such call center help 
desk operations. Design for Six Sigma 
can help develop good software specifi- 
cations. 


Originally designed for 
manufacturing environments; may dif- 
ficult apply processes that al- 
ready well defined and measurable. Can 
improve process but tell you 
you have the right process begin with 


LSI Logic Corp. has been applying 
Six Sigma for about three years and this 
year will begin using Design for Six Sig- 
ma, variant feels better fit for 
environments. “Traditional Six Sigma 
does apply some areas software 
development, like testing. was devel- 
oped manufacturing environment, 
where there’s high volume product,” 
says Terry Gowin, director quality 
Milpitas, Calif.-based LSI Logic Stor- 
age Systems. “But software develop- 
ment varies with each project and has 
much longer cycle times.” 

Design for Six Sigma especially 
powerful early projects, Gowin says. 
lot its focus getting the require- 
ments correct upfront. helps real- 
tighten down the specifications, 
there surprises later on.” 

Design for Six Sigma and CMM 
could complement each other nicely, 
says Ron Engelbrecht, operations 
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Network Configuration 
Best Practices 
Sponsored by: Voyence 


Watch, listen and learn experts 
offer network configuration best 
practices. 


It's not about network security. 
It's about secure networks. 
Sponsored by: Enterasys 

Listen experts discuss practical 
steps reduce costs and ensure 


interoperability while guaranteeing 
network security. 


Advancements Secure 
Remote Access Management 
Sponsored by: Networks 


Discover new generation 
secure remote access solutions that 
provide mobile workers, partners, 
and contractors 24/7 access. 


Enforcing Network Security 
Layer Layer 
Sponsored by: Networks 


Learn what you can the 
application level and device level 
protect your organization. 


Myths and Realities 


Sponsored by: Permeo 


Separate fact from fiction 

experts sort out the advantages 
and disadvantages SSL VPNs 
and based VPN solutions. 


Network Knowledge Your Fingertips. 


Grab front row seat some today's most influential experts 
delve into the hottest networking issues and solutions. 


Internal Network Security: 
New Perspectives and 
Technologies 


Sponsored by: Check Point 
Software Technologies Ltd. 


Take look the internal security 
risks and vulnerabilities within 
your network, and best practices 
address them. 


SANS for Enterprise 
Business Continuity 


Sponsored by: Cisco 


Hear why disaster preparedness 
real-world necessity well 
explore the technologies and 
solutions that enable Business 
Continuity alternatives. 


From Structure Chaos: 
Storage Management Secrets. 


Sponsored by: EMC 


Get the tools, tactics and techniques 
you need gain control your 
multi-vendor storage environment. 


The Components 
Successful Information 
Lifecycle Management Strategy 


Sponsored by: EMC 


Learn how maximize the value 
your information while meeting 
demanding business requirements 
across diverse applications, 
regulations, user needs and 
corporate policies. 


Secure Mobility: Anywhere, 
Anytime Access Converged 
Services 


Sponsored by: Norte! Networks 


Organizations with freedom 
move securely, move forward. Mere 
convenience being supplanted 

multimedia convergence. And 
the proactive are being substantially 
rewarded with productivity and 
savings. Learn how converged secure 
mobile communications can seam- 
lessly integrate into your enterprise 
build sustainable competitive 
advantage. 


Secure, Converged Mobility 
Appropriate Access for both 
Wired and Wireless 


Sponsored by: Hewlett-Packard 


Ever-increasing security concerns and 
increasingly mobile workforce are 
set test the mettle corporate LAN 
infrastructures. ProCurve secure 
mobility solutions provide precise 
control for both wired and wireless 
environments, including new WLAN 
products that offer state-of-the-art 
security. 


Control Your Webcast Experience 
Fully searchable Clickable agenda Available on-demand 


world.com 


Produced by: 


SITE NETWORK 
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The Greek letter sigma the 
common mathematical abbreviation for 
“standard deviation,” measure how 
widely the outputs from process vary 
from the mean. Very consistent (that is, 
high-quality) processes produce outcomes 
that are very close the mean, producing 
sigma. The smalier the sigma, the 
more values sigma can fit between the 
mean and some acceptable, user-speci- 
fied quality limit. your programming 
shop operates the Four Sigma level, 
you can 99.38% certain that your 
code “correct,” where correct for you 
means that every million lines code has 
6,210 fewer errors. 


691,463 

308,538 

66,807 

6,210 99.38 
233 99.977 
3.4 99.9997 


Software quality expert Watts 
Humphrey, Software Engineering Insti- 
tute fellow, says most software 
ships with between 1,000 and 8,000 de- 
fects per million lines code, Four Sig- 
ma. says using quality disciplines 
will improve that factor 100, aver- 
age, defects per million lines, Five 
Sigma. 

Gary Anthes 


Continued from page 

general manager LSI Logic. “CMM 
more assessment tool and as- 
sessment guide, whereas Design for 
Six Sigma set tools designed 
help you improve your scores, improve 
your assessments.” 

J.P. Morgan Chase, Six Sigma isn’t 
applied directly processes, but 
essential starting point for most 
projects, Ashworth says. “We look 
business processes wish im- 
prove and the various steps Six 
Sigma come with new business 
process model. Once you know what 
you are trying do, that’s when 
CMM comes into play.” 

Six Sigma could applied op- 
erations and services, says. The 
bank using homegrown quality 


MANAGEMENT 


framework that area but consider- 
ing using ITIL. “Just brought the 
naming conventions and the assets 
that are created Six Sigma and CMM 
together into single list that everyone 
can understand, add ITIL onto 
that,” Ashworth says. 


ISO 9000 


Interna- 
tional Standards 
Organization 


Aset 
high-level, customer-ori- 
ented, auditable standards 
(ISO 9000, 9001 and 9004) for quality 
management systems. Intended en- 
sure control, repeatability and good docu- 
mentation processes (not products). 


Well established, mature. 
Enjoys global prestige. Can applied en- 
terprisewide. Can cover software devel- 
opment and operations and services. 


Requires considerable 
adaptation when used organizations. 
Focuses repeatability and consistency 
processes, not directly the quality 
those processes. Not good for analyzing 
process and finding root causes 
problems. 


LSI Logic has been certified ISO 
9000 since 1992. also uses Six Sigma 
and Design for Six Sigma. “But ISO 
the broadest quality system that 
use,” Engelbrecht says. “It applies 
manufacturing, engineering, market- 
ing, sales and IT.” 

Design for Six Sigma focuses in- 
dividual projects and tries fix the 
problems spotlights, and can 
“make breakthrough improvements,” 
Engelbrecht says. ISO 9000, the 
other hand, aims make broad, incre- 
mental, year-to-year quality improve- 
ments across IT, says. These im- 
provements come via annual ISO 9000 
audits both internal and external 
auditors, adds. 

“ISO 9000 requires you define 
and document your processes, get 
them measurable and monitor them 
for compliance quality standard,” 
says LSI’s Gowin. “Six Sigma gives you 
the tools, once you have process de- 
fined, and remove the varia- 
tion the process make the output 
very consistent.” 

Nortel Networks Ltd. adheres 
9000, version ISO 9000 tailored 
the telecommunications industry. Its 
9000 certification applies the 


company whole, but quality initia- 
tives within support the certifica- 
tion, says Chris Ashwood, vice presi- 
dent for product development solu- 
tions. “TL 9000 has taken ISO 9000 
step further really recognizing the 
importance the development 
products,” says. 

The Brampton, Ontario-based com- 
pany’s shop has well-defined set 
priorities that’s updated every six 
months, scorecard for every project 
and strict management process for 
tracking accountability, says Nortel 
CIO Albert Hitchcock. “That very 
clearly aligns with the ISO approach 
doing what you say you are going 
do, tracking accountability and docu- 
menting the process,” says. 


Malcolm Baldrige 
National Quality 
Program 


National 
Institute Standards 
and Technology, U.S. 
Department Com- 
merce 


high-level framework for 
quality seven areas: company leader- 
ship, strategic planning, customer and 
market focus, information and analysis, 
human resources, process management 
and business results. Rates each 
these, terms approach, execution 
and results, scale from 100. 


Very broad, holistic scope. 
Can used any organization. Can sit 
top other, more focused quality 
programs. 
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address process 
details; doesn’t say how achieve quali- 
ty. directly address processes 
and issues. 


Motorola big user CMM, and 
invented Six Sigma years ago. But 
more recently, has embraced the 
Baldrige quality program. The compa- 
won Baldrige award 1988, and 
2002, its Commercial, Government and 
Industrial Solutions Sector (CGISS) 
unit won the award the manufactur- 
ing category. 

1999, CGISS did self-assessment 
against the Baldrige criteria and scored 
just 399 out 1,000 possible points. 
“Tt was huge opportunity,” says Mark 
Hurlbert, director business process- 
CGISS’s Office Business Excel- 
lence. “We established this office re- 
ally tie what are the right things 
[in the Baldrige program] with doing 
them the right way [Six Sigma].” 

The company assigned each the 
Baldrige domains senior manager. 

For example, process management 
went supply chain manager, cus- 
tomer and market focus went 
sales and marketing manager, and in- 
formation and analysis went the 
CGISS division’s Each these 
managers has his own “balanced score- 
card” with strategic objectives and an- 
nual initiatives support those objec- 
tives. For example, the CIO this year 
has strategic objective, “to serve cus- 
tomers better,” and specific project 
aimed that: standardize the tools 
and databases call centers. 

Having chartered course via 
Baldrige, CGISS using Six Sigma 
drive the ship, Hurlbert says. 2002, 
CGISS boosted its Baldrige score from 
399 between 650 and 750, more than 
enough win the prize. 44933 


2002, Commercial, Government and Industrial Solutions Sector won the 
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JUST ALITTLE BIT LONGER 


You could head offa looming 
skills shortage with creative 
use retiring baby boomers. 
skills that can’t outsourced. the 


March issue Harvard Business 
Review, Tamara Erickson and Bob 
Morison The Concours Group, 
consulting and research firm 
Kingwood, Texas, along with co- 
author Ken Dychtwald, suggest 
that there’s pool workers who 
are ready, willing and able fill 
the gaps. Erickson and Morison 
explained Kathleen Melymuka 
how harnessing this resource will 
have profound implications for the way view work. 


The retirement baby boomers will 
bring number workforce challenges, 


You make some startling points about the decline the rate 
U.S. workforce growth. What problem will companies 
facing over the next decade so? The problem 
demographics the combination decline birth- 
rate and baby-boomer bulge. There are not enough 
younger workers come and take their place. 
MORISON: The Bureau Labor Statistics says that 

the U.S. will million workers shy 2010, but 
more important, there will skills shortage, be- 
cause the baby boomers were retire schedule 
and masse, there aren’t enough younger workers 
speed take their place. 


It’s hard believe this will problem the world, where 
many companies have cut back workforces and outsourced 
jobs, leaving countless skilled workers unemployed. 

interesting. It’s tough predict how will 
shake out due immigration big variable look- 
ing any demographic pattern and outsourcing, 
which hits the sector most particularly. But even 
there, shortages are still predicted. recent study 
government agencies showed 75% will face shortages 
qualified staff the next three four years. 
MORISON: There are two species workers: those 
involved the technology, and those who have 
know about the business and how applications are 
going support business processes. Those the 
more applied side are the ones who tend more 


experienced, and organizations are going see 


skills gaps those people leave the workforce. 
definition, those jobs can’t outsourced. 


What approaches should companies take recruit and retain 
the right people over the next few decades? 

Make human resource practices more friendly ma- 
ture workers. Put place flexible retirement pack- 
ages that allow people phase out rather than drop 
off cliff. Look for creative ways recruit popula- 
tions other than the young. Struc- 
ture health care and pension cov- 
erage allow people phase out 
more gradual way. 


fast-moving, high-pressure, fu- 
ture-oriented, young person’s game. 
Can older people cut the mustard? And 
even they can, wouldn’t large cadre 
older workers bad for company’s 
image? MORISON: were 
have this discussion five years from now, that might 
seem strange question ask, because companies 
will have larger mix mature employees. 
just passed the historical low point those over 
the workforce. It was just over 10% in the year 2000, 
and 2010 will 20%. Corporations will learn 
what Madison Avenue finally learning. Even Gap 
jeans ads now feature generational mix. 


The government predicts a big jump in the number of 
older workers the U.S. workforce this decade. 


60% 


10% 

16-24 25-34 45-54 55-64 65+ 

AGE WORKERS 


Lots older 
people have very strong 
created image 
wanting tap into 
those skills, might 
skim the cream off the crop and attract very rich set 
capabilities. 


THEY'RE ALREADY GONE 


When the economy improves, your top 
IT talent may be headed out the door: 


QuickLink 43001 
www.computerworld.com 


What about workplace rules? Are certain work arrangements 
more likely attract older workers? MORISON: Let the lo- 
cation and timing work flexible needed 
let employees achieve reasonable work/life bal- 
ance. That’s something that heard from all age 
groups. But mature workers, especially those who are 
retired, can call their own shots. They want travel 
and pursue other avocations. flextime especially 
important foundation for flexible retirement. 


What flexible retirement? The basic idea 
give people the ability avoid that abrupt clifflike 
departure, enable them continue working rela- 
tionship for many years past traditional retirement 
age, whether through contract work employment 
that phases into part time over time. It’s 
very pragmatic matter: Businesses need skills the 
baby boomer generation retires and there are not 
enough make for that brain drain. Many mature 
people need work, and others want because they 
enjoy the action, but their own terms and not full 
time. It’s natural match. 


there problems with health and retirement benefits 
this type arrangement? MORISON: It’s lot easier 
bring people back who have already retired than 
structure gradual phase-out. Many retire- 
ment plans operate the concept some multiple 
the last few years you work. Those need restruc- 
tured people don’t pay penalty for phasing out. 


What about the concern that older workers may burned out 
just going through the paces until retirement? 

Burnout both reality and myth. There 
question that we’re seeing lot burnout the mid- 
career point. And some those you want retire. 
But our research shows that many people are not 
burned out per se; they’re just not engaged. fact, 
they’re craving more connection. the question for 
corporations how grab hold these people and 
recapture that sense engagement before they drift 
off. think training and learning can have very 
important role that re-engagement process. 


Can this approach succeed setting where workers 
have keep their skills sharp and date? MORISON: 
Why not? People often jump opportunities 
learn new things. When retirees return, one of the 
main motivations keep learning. Don’t assume 
that people can’t hack it. There growing popula- 
tion skilled workers becoming available, and 
should take advantage them. 44897 


Melymuka Computerworld contributing writer. 
She can reached kmelymuka@yahoo.com. 


This the latest series monthly discussions with Harvard 
Business Review authors topics interest managers. 
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Automatic overview operation. 
Automatic shipping sale. 

Automatic identity verification. 

Automatic updating inventory. 
Automatic tracking delivery. 


MIDDLEWARE IBM SOFTWARE. Powerful software 
like Tivoli? and WebSphere® Open, behind-the-glass 
technology that can automate all IBM, Microsoft? Oracle, 
Sun. Problems are foreseen and solved before they occur. 
resources are directed core business needs. Costs are 
significantly reduced. It's automation. demand. And it's 
what keeps companies and customers happy. Very happy. 


Everywhere. Can you see it’ 


THE PAPER AND INK USED THE ORIGINAL 
PUBLICATION MAY AFFECT THE QUALITY 
THE MICROFORM EDITION. 
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Where the Jobs Are: 
Spring 2004 Hiring Outlook 


Of more than 1,400 ClOs surveyed across all industries, 11% plan to hire IT personnel and 2% plan to 
decrease current IT staff during the second quarter. C!Os in the retail sector are the most optimistic, 
with 17% of them expecting to hire and 2% planning to cut IT 

staff. The 15% net increase is six percentage points above 

the national average for all industries. 


viduals hired into infrastructure and operations. 
would say the greatest need has been applica- 
tion development, specifically people with 
WebSphere, database and Internet 
development skills. 


Experts say business-specific knowledge 
makes professional all the more valu- 
able. What can workers learn 
more about the company’s operations out- 
side IT? you [support] brokerage, for 
example, there are number certifications 
you can get. You can also become certified 
financial planner. lot [financial ser- 
vices] industry-specific training available lo- 
cal community colleges and through industry 
associations. 


SOURCE: ROBERT HALF TECHNOLOGY INC . MENLO PARK. CALIF 


Numbers Crunch 


What, your opinion, are the kinds jobs 
most likely outsourced? Application 
maintenance. 


What are the jobs least likely out- 
Ameritrade Holding hired 
wit 


sourced? Unix administration, because the 
servers are here the U.S. not absolutely 
necessary, but you typically have your Unix en- 
gineers where your servers are. These servers 
likely move offshore because then 
you run into significantly more risk and more 
regulatory issues, and you introduce application 
latency that you might not otherwise have. 

King 


froyn fhe 
fA viva workers 


What specific skills have you been hiring? 
Where your greatest need for profes- 
sionals? We've been hiring skills pretty much 
across the board, with number indi 


SOURCE CULPEPPER AND ASSOCIATES INC., ALPHARETTA, GA 


months. Allstate will train 
907 incumbent workers 
Illinois, Ohio and Texas 
systems administration, pro- 


filled H-1B workers, ac- 
cording the company. 
learn more about the 
training grants, which are 


METLIFE INC., Corp. 
and Citigroup Inc.’s Citi Card 
unit are among the U.S. com- 
panies earmarked receive 
federal dollars provide 
high-level training U.S. 


workers for jobs now held 
foreign workers employed 
the U.S. under visas. 
Under million grant, 
which will administered 
the Computing Technol- 


ogy Industry Association, 
global trade association, 
more than 2,600 American 
workers states will 
receive advanced job 
training the coming 


gramming and Web applica- 
tions. MetLife will train 600 
Web designers, Web develop- 
ers, network architects and 
application developers all 
jobs that have been typically 


supported user fees paid 
employers who hire 
professionals under the 
visa program, www. 
doleta.gov. 44944 

Julia King 


Skills Demand 
| \ Wha he does: Dit- H 
$270 billion bank holding company 
adopted its ongoing insourcing 
: as hired more than 2,100 IT profes: discontinae ther in 2005. 2004. 1-4, vias alow 
in unectatty occupations ta work eripiovess from operations abroad 
j 


MIDDLEWARE. what demand business 
And middleware IBM software like Lotus? Rationa 
Instantly admitting patient. and that develops, integrates and mar 
Immediately processing claim applications and systems. Everything efficient 
Across the board. Across platforms. Microsoft 
Automatically approving procedure. 


You name it. open middleware can connect 


Constantly tracking treatment. business benefit. Instant customer satisfaction. 


DUS 


eware Everywhere Can you see it? 
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A.G. Edwards Cuts 
138 Staffers 


St. Louis-based securities broker- 
age A.G. Edwards Sons Inc. 
recently announced that it’s cut- 
ting about 138 workers from its 
department. Approximately 100 
those employees will hired 
Kanbay Inc., Rosemont, 
based services firm that’s help- 
ing A.G. Edwards upgrade its se- 
curities processing and sys- 
tems. Another employees 
accepted severance packages. 
About 1,200 professionals will 
remain employed A.G. Ed- 
wards’ St. Louis headquarters. 


Supervalu Revises 
Data Warehouse 


Supervalu Inc., major U.S. gro- 
cery chain based Eden Prairie, 
Minn., recently upgraded its data 
warehouse consolidate multi- 
ple account-reporting and cate- 
gory management systems into a 
single source information, 
business users will have informa- 
tion quickly respond market 
changes. The data warehouse, 
from Teradata, Dayton, Ohio- 
based unit NCR Corp., helps 
managers make real-time deci- 
sions on product assortment, 
pricing, merchandising and pro- 
motions based the potential 
effect sales profit. 


Bank Awards AT&T 
Voice/Data Pact 


New York Community Bank 
recently awarded AT&T Corp. 

$8.6 contract for local 
and long-distance voice and 
data services that will create 
WAN linking 139 branches. AT&T 
will also provide high-speed 
Internet connectivity. The West- 
bury, N.Y.-based bank said 
expects the network provide 
smoother teller transactions, 
faster loan processing and ap- 
provals, and improved branch- 
to-branch communications 

New York Community Bank esti- 
mates that under the contract, 

will save more than million 
over the next four years. 


BART PERKINS 


Peanut Butter 
Syndrome 


RECESSION HAS FORCED most orga- 
nizations cut their budgets, projects and 
staffs. Companies often believe that 
putting all expenses into single budget 
and squeezing that budget hard enough, they can force 
total expenditures down some arbitrarily prede- 
termined level. But IT’s purpose enhance business 


productivity. the central 


budget overly con- 
strained, the business units 
will bury costs their 
own budgets. 

The result the “peanut 
butter syndrome.” you 
hold lump peanut but- 
ter your hands and 
squeeze hard enough, 
eventually some the 
peanut butter will squish 
out between your fingers. 
Similarly, when the central 
budget squeezed too 
tightly, spending will 
spill into other budgets. 

Many business units still 
have unique needs that 
must met order im- 
prove business results. Unfortunately, 
result the retrenching the 
past few years, the CIO often doesn’t 
have the staff budget fulfill those 
needs, and many business units 
longer view central their partner. 
the economy grows and business 
units have more discretionary dollars, 
peanut butter will expand. Business 
units are doing end runs around the 
central organization, buying hard- 
ware and equipment,” and 
hiring consultants and technical 
staffers “analysts.” Meanwhile, ar- 
chitectural standards are compro- 
mised, the total cost under- 
reported, and the perception IT’s 
usefulness undermined. 

most organizations, it’s unrealis- 


BART PERKINS 
managing partner 
Leverage Partners Inc. in 

Louisville, Ky., which 
helps CiOs manage their 
IT suppliers. He was CIO 

at Tricon Global 

Restaurants Inc. and 

Dole Food Co. Contact 

him at BartPerkins® 

LeveragePartners.com. 


tic expect totally 
peanut-butter-free. But 
peanut butter sticky, 
messy and hard remove. 
Help prevent the spread 
peanut butter syndrome 
taking the following steps: 

Understand the business 
units’ challenges. Even you 
don’t have the budget 
start new development 
projects, you need un- 
derstand each business 
unit’s problems and 
get the support needs. 
possible, help the unit 
build business case. 
the process, you may joint- 
discover way meet 
its needs through exist- 
ing system. any event, the business 
case will help more clearly articulate 
its needs, well identify any re- 
engineering required make the new 
system successful. 

Help the business units creatively trans- 
form peanut butter projects into official proj- 
ects. One firm’s clients had lay 
off staff when her development 
budget was severely cut. Six months 
later, business unit created com- 
pelling business case for new proj- 
ect. Although the CIO agreed that 
was desirable, she didn’t have enough 


staff undertake the project. Working 


with the business unit, she selected 


systems integration firm that had suc- 


cessfully worked with before 
with the explicit understanding that 


the firm would follow IT’s architectur- 
standards. The CIO also assigned 
architect and project manager from 
her staff oversee the project. The 
business unit paid for the project and 
got the desired software. The CIO was 
able select preferred vendor, 
maintain architectural integrity and 
win the business unit’s gratitude. 

Detect peanut butter projects before 
vendor chosen. Ask your vendors 
tell you about any potential peanut 
butter projects. (They often hear about 
them before you do.) return, en- 
courage business units use existing 
strategic vendors order preserve 
architectural integrity. 

Integrate the chart accounts into 
the corporate chart accounts. Few orga- 
nizations make expenditures ex- 
plicit their COAs, which makes 
easy for business units bury 
spending “analysis” other pro- 
jects. spending gets diffused 
throughout the organization, be- 
comes much harder aggregate 
spending and negotiate with vendors 
the next time you need price conces- 
sions. Vendors negotiate quantity 
purchased, regardless whether the 
dollars come from elsewhere. 

The peanut butter syndrome has be- 
come increasingly prevalent over the 
past few years. grows, compro- 
mises the integrity your architec- 
ture, undermines your negotiating 
power, marginalizes the central or- 
ganization and makes effective suppli- 
management nearly impossible. 
Controlling the peanut butter syn- 
drome gives you leverage over total 
spending and protects your architec- 
ture, while building bridges between 
the organization and the business 
units and your vendors. 44892 
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Got storage solution 
jood worthy 


award? 


Nominate for the Storage Networking World 
“Best Practices Storage Awards Program!” 


Computerworld, conjunction with the Storage Networking Industry Association (SNIA) and 
Networking World seeking user-organization case study submissions 

NETWORKING BES 

| WORLD 

PRACTICES case studies highlighting successful noteworthy solution implementation 

projects and deployments the following categories: 


PROGRAM 


| 
| 


This program will evaluate, select and recognize ten Storage Technology “Best Practices” 


Systems Implementation 

Storage Reliability and Data Recovery 

Data Lifecycle Management 

Industry Regulation Compliance and Corporate Governance 
Innovation and Promise 


COMPUTERWORLD 


Nominations are welcomed from Users/Implementers; Systems Integrators/Consultants; vendors behalf customers, or, 
their own In-House Deployment; and firms behalf clients. Multiple submissions case studies describing different deployments 
per company/organization will considered. 


Winners will featured Computerworld special advertising supplement profiling the company and submitted case study. 


Submit your nomination today! The deadline Tuesday, March 9th 9:00pm Eastern time. 
Complete the nomination form at: snwusa.com/best_practice_storage.html 


PRODUCED BY: ENDORSED AWARDS CEREMONY EXCLUSIVELY SPONSORED 


STRATEGIC PROGRAMS where information lives 


: 
| 
| 
Awards spons: Endorsed by 
2 
ig where information lives 2) 
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Project Manager: Duties include 
Plan, direct, and coordinate 
activities of complex web appli- 
cation projects for both in-house 
systems and outfacing e-com- 
merce marketing and business 
applications. PM will identify 
business targets and opportuni- 
ties for insurance products and 
financial services; design and 
coordinate development of web 
applications for target markets; 
and maintain, troubleshoot and 
enhance existing business web 
applications. PM wiil use strong 
understanding of business oper- 
ations management, financial 
and marketing communications 
theory along with a working 
knowledge of computer systems, 
design, web based applications 
development programming 
tools to develop e-commerce 
solutions for financial and insur- 
ance products. Daily duties may 
include: review and formulate 
systems scope and project 
objectives; identify role and 
function of each team member 
effectively coordinate the activi- 
ties of the team and project 
identifying appropriate resource 
required; communicate and con- 
sult with programmers, systems 
analyst, database developers. 
create and review status reports, 
coordinate project activities with 
activities of government regula- 
tory or other governmental 
agencies where required. Min 
Reqt's: BS/BA (foreign equiva- 
lent accepted) in Business 
Marketing, Operations Manage- 
ment or MIS and 2 yrs experi- 
ence in job offered or a related 
occupation (i.e. e-commerce 
project management or market- 
Ng communications experi- 
ence). MUST also possess: (1) 
Demonstrated experience with 
Marketing communications pro- 
jects involving insurance and 
financial services and products: 
(2) Strong working knowledge of 
generai computer systems 
design, web application design 
database structure, and pro- 
gramming; and (3) Dem- 
onstrated knowledge and expe- 
rience using marketing, finance 
and iterative project manage- 
ment methodologies and con- 
cepts for developing e-com- 
merce web applications. Basic 
pay is $80,404 per year FT and 
standard company benefits 
EEO. Submit 2 resumes and 
respond to Case No. 2002- 
03499, Division of 
Services. Alien 
Certification Unit, 19 Staniford 
Street, 1st Floor, Boston, MA 
02114 


Senior Software Engineer 
sought in Boston, Massa- 
chusetts area for development 
of internet based software for 
financial and administrative 
functions of healthcare organi- 
zations Requirements are 
Bachelor's degree in engineer- 
Ng or the equivalent, and two 
years experience in VB 
VBScript, Java/JavaScript, SQL 
Server, System Domain admin- 
Stration, HTML/XML, relational 
databases, networking 
client/server, Nt4.0/2000, and 
Microsoft development tools 
Send applications to Rec- 
ruitment, Req. No. 2083, P.O 
Box 1070, Burlington, Vermont 
95402-1070 


DATABASE DESIGN ANA- 
LYST sought by surgical 
clinic in Houston, TX. Must 
have degree & exp 
Respond by resume only to 
Exec. Director, L/H - #10 
Town & Country Plastic 
Surgery, 10565 Katy Frwy, 

100, Houston, TX 
77024 


1S SYS. STAFF ANALYST 


Apply knowledge of Siebel prog 
techniques & comp. sys. to plan, 
dvip, test, implement & docu- 
ment comp. progs. Eval. user 
requests for new or modified 
progs. Make site visits to gather 
info. & analyze sys. reqmnts. 
Consult w/users to identify oper- 
ating procedures, clarify pro- 
gram objectives & leverage fun- 
ctionality of Siebel software to 
address critical reqmnts. Apply 
knowledge of industry best-prac- 
tices while configuring the Sieb- 
el software & dsgng enhance- 
ments to optimize processes. 
Utilize all components of Siebel 
dvipmnt environment to combine 
pre-dvipd software objects with 
customized programming to 
generate appins that are highly 
integrated with Siebel sys. Over- 
see installation of hardware & 
software. Train & provide tech 
supr ort to users of Siebel prog 
Monitor performance of sys. 
after installation. Carry out pro- 
gramming, debugging & trou- 
bleshooting, as well as complete 
description code of IDOC & 
BAPI Excel based on SAP R/3. 
Master's deg. in Project, Constr. 
or IS Mgmt or Comp. Sci. reqd + 
2 yrs exp. in position offered or 
in Comp. Sci., Bus., Constr. 
Mgmt or Math. Must have exp. 
converting appins to SAP R/3 
software (incl. CO, HR, PP, PI 
MM & SD modules) utilizing 
Oracle, ABAP/4, BAP! Excel & 
Siebel 7/2000 computer tools) 
High mobility preferred. 40 hrs/ 
wk, OT as reqd, 8am - 5pm, 
$68,000/yr. Qualified applicants 
submit resumes to: Fayette 
County CareerLink, Attn: Caree- 
rLink Program Supervisor, 135 
Waylan Smith Drive, Uniontown, 
PA 15401. Please refer to Job 
Order No. 396465. 


PM software projs. - Java, C++ 
VB, ASP, PB, Oracle, Sybase. 
Utilize RUP. Critique codes in 
J2EE (EJB, JMS, JNDI), & 
OOAD. Full life cycle dev.: sys- 
tem anal., concept, design, pro- 
totype, document, implement 
coordinate, plan, code, test, 
budget & estimate. Create/ 
maint. proj. plan of tasks/ sched- 
ule. Interface w/ client, updates, 
& channel all new reqs./ change 
requests to develop. team 
Budget ctri., bills & collection 
Present resource issues, perf., 
client concerns & status to inter- 
nal mgmt Get client's b/z 
needs, build prof. relationships. 
& new sales. Comply w/ SEI 
CMM Level 5 A guide. BS in 
Comp. Apps + 5 yrs. exp. in job 
duties + 3 yrs. QA exp. in SEI 
CMM level 5. Comp. salary. 
Apply: Core Concept, 1000 
Abernathy Rd., #1010, Atlanta, 
GA 30328 with proof of perm 
Work authzn. 


Applications Programmer 
for NE OH to analyze user 
req., procedures & prob- 
lems to automate process- 
ing/improve existing com- 
puter system; troubleshoot; 
eval. existing IS for effec- 
tiveness. Bachelor's Deg- 
ree in Information Systems 
Resumes to: HR, Custom 
System Company, 6670 W. 
Snowville Rd. Cleveland, 
OH 44141. EOE. No calls. 


Seeking qualified applicants for 
the following positions in Orlando. 
FL: Senior Programmer Analyst. 
Formulate/define functional req- 
uirements and documentation 
based on accepted user criteria. 
Requirements: Bachelor's degree 
or equivalent* in computer sci- 
ence, MIS, mathematics, engi- 
neering or related field plus 5 
years of experience in systems/ 
applications development. Exp- 
erience with C and/or C++, Java 
and RDBMS also required 
“Master's degree in appropriate 
field will offset 2 years of general 
experience. Submit resumes to 
Sibi George, FedEx Corporate 
Services, 1900 Summit Tower 
Bivd., Suite 1400, Orlando, FL 
32810. EOE M/F/D/V. 


SOFTWARE ENGINEER to pro- 
vide on-site consultancy in 
design, development, cus- 
tomization, testing and mainte- 
nance of e-commerce web- 
enabled applications software 
using .Net, CSharp, ASP, 
ADO.Net, Activex, COM/DCOM, 
HTML/DHTML, XML, MTS, IIS 
PL/SQL, Rational Rose, VB and 
related technologies; provide 
software support on Windows 
2000, Internet Information 
Server, Oracle and SQL Server. 
Require: Bachelor (or equiva- 
lent) in Management Information 
Systems/Computer Science with 
five years experience in the job 
offered or any experience pro- 
viding skills in described duties 
40% travel required to client 
sites within the United States. 
Salary: $65,000 per year, 40- 
hour/week, 9 am to 5:30 pm, M- 
F. Apply with resume to 
President, K2 Technologies. 
Inc., 2107 Franklin Drive, 
Papillion, NE 68133. 


Software Engineer: Design, 
code, customize & integrate s/w 
components into wireless prod- 
ucts. Design & develop applica- 
tion level s/w for Bluetooth pro- 
files, IrDA, USB connectivity 
modules using C, C++. Develop 
applications that communicate 
with non-PC network products 
such as digital handsets, PDAs 
and commercial test equipment 
Bach's deg in Comp Sci 
Physics or Elec Engrg reqd + 1 
yr exp in job offered. Send 
resume to Panasonic Mobile 
1225 Northbrook Parkway, Suite 
2-330, Suwanee, GA 30024 
Attn: Debbie Greer, PL. 


Programmer Analysts - Design, 
Develop and Maintain 
Enterprise, Web, and Portal 
applications in Java and/or VB 
Database Administrators - 
Oracle DBA activities 
logical/physical design of data- 
base 

Software Engineers - Prepare 
report design, functional, pro- 
gram specifications & deploy 
using Brio Enterprise Server 6.5 
and ETL development.Min Edu- 
Bachelor's Degree or equi, Min 
Exp-2 yrs. Job may involve 
working at various locations 
throughout the US. Please send 
resumes to Attn HR 
Tekessence Inc . 1001 Office 
Park Road, Suite#107 West Des 
Moines, \OWA 50265 


Information Management Res- 
earch seeks applicants for the 
position of Computer Systems 
Analyst in Englewood, CO to 
design and perform quality 
assurance testing on document 
management software products 
customized for Japanese and 
other international customers 
Requirements for the position 
include a bachelor's in computer 
science, computer engineering 
or closely related field and work- 
ing knowledge in testing docu- 
ment management products and 
in Alchemy and Microsoft Frame 
Works. Respond by resume to 
Peter Galligan, Information 
Management Research, 6025 S. 
Quebec St., #260, Englewood, 
CO 80111 


Programmer Analyst need- 
ed wiexp in web applica- 
tions using J2EE, C++, 
Windows NT, Unix, Oracle 
Suite products, customiz- 
ing records, panels, pages 
& menus using Peoplesoft 
HRMS, Peoplecode, SQR, 
People Tools, SQL & 
Oracle environment. Mail 
resumes to: Compu-info, 
410 Kingston Road, #2A, 
West Kingston, RI 02892. 


Turing Consultants, Palantine, IL 
based IT company has muiiiple 
openings for exp'd Computer 
Professionals w/relevant educ. 
& exp. to analyze, devip, sprt, 
test, maintain IT projects w/fol- 
lowing skills: VB, VB Script, Peri, 
Erwin, COBOL. PL/SQL, C, 
C++, VC++, | Planet, ASP. Web 
techn.: HTML, DHTML, XML, 
UML, Websphere, Weblogic, E- 
business intelligence, GU! tools, 
ORACLE-RDBMS, ASP, JAVA 
Technologies, (JDBC, J2EE, 
EJB, Java Script). Operating 
systems: Sun Solaris, Unix, 
Linux, Rational Rose, Crystal 
Reports, PowerBuilder. Offering 
top $$+bnfts. 40% travelling to 
client sites req'd. Resumes to: 
1024 N, Cardinal Drive, 
Palantine, IL 60074 


Computer Programmer Analyst 


Full time position to work as 
Computer Programmer Analyst, 
needs knowledge of Business 
Intelligence tools (Brio, Business 
Objects, Cognos), data ware- 
housing and data mining con- 
cepts, Enterprise reporting, ex- 
perience in Customer relation- 
ship management, Siebel, profi- 
ciency in programming, SQR, 
Java, PL/SQL, C ++ and famil- 
iarity with one of the relational 
databases Oracle or Sybase. 
automated testing tools like mer- 
cury/rational. Requires Bachel- 
or's degree in Engineering or CS 
or CIS or equivalent and 2 years 
of experience in the job offered. 
Applicants send resume to 
Pyramid Consulting Inc, 8665 
Providence Drive, Noblesville, 
IN 46060. 


CGI Inform. Sys & Management 
Consultants, Inc. is looking for 
Sr. IT Consultant to develop web 
portal applications using Oracle 
QIAS, data warehouse using 
pl/sql, reports6! & discoverer. 
Min. MS plus exp. of Oracle 
x/8/9, 9IAS, PL/SQL, Java- 
Script. Contact lisa. halter@ 
¢gi.com. No calls. EOE 


Innovative Consulting is looking 
for program or system analysts. 
IT engineers. Candidate must 
have BS/MS degree. Travel is 
required for some positions 
Skills in C/C++, VB, Oracle 
SQL, SAP, WebSphere, Java 
are plus. Good salary. Please 
send resumes to info@icscorp 
usa.com. EOE 


Network Project Coordinator: for 
Healthcare Mgt. S/ware dvipmt 
Effect cross-cultural communi- 
cation in-house & for out- 
sourced s/ware projects. Intense 
clienUvendor (India) liaison/con- 
sulting expected. Analyze med- 
ical/institutional requirements. 
incl. business/ staffing/insurance 
inputs; integrate process-centrd 
web-enabled s/ware. Plan 
report & delegate, optimize dsgn 
elements & apps w/in time/bud- 
get. Req'd: 5 yrs exp. s/ware 
mgmt., Bach in Mgmt & Admin 
w/ certifs. in Microsoft Net- 
working, Windows NT. Resume 
ONLY: #NPC, Velos, Inc., 2201 
Walnut Ave., #208, Fremont, CA 
94538. An EOE employer 


Check out our jobs 


the combined 


CareerJournal.com 


database. 


Careers 


Wants You! 


Take the hassle out 


job searching and 


check out 


www.itcareers.com. 


Today, more than ever, 


the right skills fuel the 


new economy and 


Careers wants you 


there. Check out at: 


www.itcareers.com 


| 
| 


itcareers.com 


can solve the 


labyrinth 


job hunting 


matching the 


right skills 


with the right 


position. 


Find out more 


www.itcareers.com 


2 


Systems Analysts to provide in 
depth analysis, design, devel- 
opment and testing services for 
database development projects; 
perform project scoping, project 
planning, project time and cost 
schedules, quality of deliver- 
ables and study and evaluate 
new technologies and method- 
ologies; provide business guid- 
ance for complex user prob- 
lems; guide teams by providing 
methodologies to be followed; 
interact with clients on project 
related issues. Require Masters 
degree or foreign equivalent in 
Computer Science or Business 
Administration. High salary, f/t 
position. Travel involved. Res- 
umes to HR, Smartsoft Interna- 
tional, Inc., 4898, South Old 
Peachtree Rd, Norcross, GA 
30071 


Windows System Cons- 
ultant wanted by reseller of 
accounting/fin. bus. appl. 
S/W. Requires B.S. or 
equiv. in Comp. Sci. plus 2 
years exp. 
Windows NT. Reply to H.R., 


including 


Fantasia Technology Part- 
ners, LLC, 25 Lincoln St., 
Framingham, MA 01702. 


Systems Architect for IT systems 
and customized applications 
provider in Roswell, GA 
Minimum four years experience 
designing systems architecture 
and databases using JCL, ASP 
and SQL, including conducting 
business and systems integra- 
tion analysis, designing applica- 
tions in client/server, n-tier, 
ntranet, extranet and web envi- 
ronments, integrating main- 
frame, legacy and windows sys- 
tems and providing testing and 
training support. Send resume 
to Netwise, Inc., Attn: Human 
Resources, 130 Winterberry 
Court, Roswell, GA 30076 


Jr. Software Programmer. 
Assist in writing & testing 
comp. programs using C 
C++, Javascript, Visual Basic 
(incl. VBScript & VBA), trans- 
act-SQL, SQL server 2000 
DBA, Perl, ASP, HTML, Java- 
Script, XML & Crystal Reports 
in NT/Windows 2000 in a 
multi-tiered envir. Req: BS in 
Info. Tech. or Comp. Sci 
40hrs/wk. Job/Interview Site 
Woodland Hills,CA. Send 
tesume to Finity USA, Inc 
@22123 Martinez Street 
Woodland Hills, CA 91364 


Computerworld 


Sr. Test Engineer needed in 
Fayetteville, GA to plan support 
software verification & UNIX & 
mainframe testing of complex 
revenue accounting project 
Support test cases, test scenar- 
ios & reqs verification & trace- 
ability matrices. Establish test 
beds, test scripts, & test docu- 
mentation, to include test strate- 
gies, application cross-refer- 
ences, test case design, test 
case execution, test reporting & 
test evaluation. Tools: UNIX, 


4GL, TSL, ISPF, TSO, JES2 
SDSF, RACF, ACF2. REQS: 3 
yrs exp. in job offered. Please 
forward resume to D. Gelinas 
Genisys Engineering Corp., 100 
Havenbrook Ct, Fayetteville, GA 
30214. No calis of faxes please. 
EOE 


Software Consultants needed at 
client sites to dvip applic using 
MVC (Model 2) architecture 
dsgn & dvip authentication 
systm in Weblogic. Tools used 
J2EE-Java, Serviet, JSP, JSTL, 
EJB, JMS, RMI, JSF, JESS 
engine, Velocity, STRUTS. 
Taglibs, ANT, JBuilder, Web- 
Logic, WebSphere, Iplanet, iBM 
MQ Series, C/C++, Oracle 
Lotus Notes, Domino Server, 
Teinet API, MochaSoft, Unix 
ASP, IIS, VB. Apply to: Global 
Consuitants, Attn: Hireme, 25 
Airport Rd, Morristown, NJ 
07960. 


Matrix Management Systems. 
Inc. is looking for 


Programmer Analyst: Should 
have a bachelors degree in 
computer science/related field 
with 3+ years of experience in 
the following: .Net Architect 
VB.NET, ASP.NET, C# Architect 
VB6.0, ASP, XML, XSL, SQL 
SERVER 7.0/2000, Oracle, Cold 
Fusion, Clear Quest, VC++ 
DB2, CICS, COBOL, Rational 
Rose, WinRunner and Load- 
Runner. We accept foreign edu- 
cation equivalent of the degree. 
or the degree equivalent in edu- 
cation and experience. Send 
Resume to Attn: HR, 932D 
Atlantic Ave, Hoffman Estates. 
IL 60194 


Synergy has multiple openings 
for IT professionals. Qualified 
applicants must have BS with 
substantial experience. Strong 
background in SAP, SQL, ERP, 
VB, TCP/IP Suite, Oracle is plus. 
Send resumes to hr@synergy- 
com.com. Travel is required for 
some positions. Sponsor GC 
EOE 


CMS (Customer Management 
Systems) has openings for expe- 
rienced IT professionals to pro- 
vide full life cycle IT & business 
solutions to clients. Quali- 
fications include BS with experi- 
ence using SQL, EJB, JSP, UML 
OOP/OOD, Lotus, Java, VB, etc 
Apply at: 

cms@earthdome.com. EOE 

No Calls. 


InfoWorld 


MVS, DOS, Windows NT, JCL,} 


Network World 


Delasoft, Inc., IL based IT com- 
pany seeking Computer 
Professionals (multiple open- 
ings), wirelevant edu. & exp. to 
analyze, devi., design, test, sprt. 
maintain IT Projects, w/following 
skills: Java technologies, Web 
Tech (Web Sphere, Web Logic 
XML, HTML, DHTML, UML); 
Unix, Linux, Solaris, Sybase. 
Oracle databases; Testing/QA 
tools: WinRunner, LoadRunner. 
TestDirector, Silk GUI & Rational 
Rose Tools, SQL server. C, C++ 
CICS, COBOL, SQL/PLSQL 
Languages; ABAP, SAP, BAAN, 
Siebel, TCP/IP, ERWIN & Win. 
envrmnts. Offering top $$+bnfts 
40% traveling to client sites in 
US. Resumes: 2200 S. Main 
Street, Suite 111, Lombard, IL 
60148 


Computer Professionals (pro- 
grammer, system analyst, soft- 
ware or project engineers) want- 
ed E-Con. Candidates must have 
minimum BS or equivalent 
degree with IT experince. Use 
Weblogic 6.0 Application server. 
Java Serviets, XML. Please send 
resumes to: hrd@goecon.net 
EOE. No calls. 


Global Consulting is looking for 
Programmer/system analysts 
software engineers. Candidate 
must have BS with IT experience. 
Good skills in C/C++, Java 
Oracle, EJB, J2BB, WebLogic 
VB, HTML are plus. Traveling is 
required for some positions 
Apply job@g-c-g.net EOE. No 
Calls. 


Data Consulting Group is looking 
for software engineers/program- 
mers to develop security infor- 
mation service system using VB 
Oracle based on client/server. 
Minimu BS with experience using 
Oracle, VB, Crystal Reports 
Please send resumes to 
recruiter@dcgroupinc.com 
EOE. No calls. 


Senior IT consultants (s/w engi- 
neer or system analyst) wanted 
by MD Soft, inc. Duties include 
implementation of Siebel appli- 
cations, programming. Must 
have BS plus experience using 
Siebel, Oracle, Powerbuilder 
Sponsor H1/Green Card. Please 
apply at mdsoftinc@yahoo.com 
EOE 


Computer Software Engin- 
eer, Las Vegas, NV. Dvip/ 
create/modify computer 
apictns software/spcizd ut- 
ility prgrms. Analyze user 
needs/dvip software solu- 
tions. Design/customize 
software for client use 
Work individually or crdntg 
database dvipmt as part of 
team. 2 yrs exp. Send res: 
Choopa.com, 1 Bethany 
Road, Bidg 2, Suite 24, 

NJ 07730, D. 


Inc. 
(866) 225-8064 
www. ipexpert.com 


CCIE (R&S, SEC, and C&S), CCSP, 
CCNP, CCNA, Telephony 


E Computer Technoiogies, Inc. 
is a computer and technology 
solutions provider of business- 
to-business and E-commerce 
application implementation and 
integration services specializing 
in E-purchasing systems. Our 
company currently has openings 
for the following 


Programmer Analysts: Design 
and develop financial based 
applications using client server 
technology, n-tire technologies 
with Oracle 8i, Oracle ERP, SY- 
BASE databases using J2EE 
WEBLOGIC 7, Netscape and 
Enterprise Server, IBM MQ Ser- 
ies, Extensible Style Sheet Lan- 
guage Transformations, Unified 
Modeling Language for design 
and object-oriented analysis and 
design. Design product features 
to meet requirements and per- 
form quality tests for new and 
existing features. Use knowl- 
edge of market and accounting 
principles to develop software 
Need Bachelor's degree in Com- 
puter Science or Engineering 
Need 2 yrs of exp 


Send Resume to: E Computer 
Technologies, Inc., 777 S 
Central Expressway, Ste #4-F. 
Richardson, TX or via e-mail at 
jobs@ecomputertech.com 


Computer Professionals, exp'd 
(multiple openings) sought w/rel- 
evant Bachelors or Masters 
depending on position & exp in 
QA, VB Script, Perl, Erwin, C 
C++, VC++, | Planet, ASP, 
HTML, DHTML, Java Script 
Sybase, Oracle, SQL Server, 
SQL, T-SQL, MS Access 
Business Objects Crystal 
Reports, DB2, Windows NT. 
CEML, Linux, IIS, Unix, PL/SQL 
Cognos, Brio. ODBC 
Connectivity, Netscape Enter- 
prise Server. Application Server 
‘of Cold Fusion, Data Modelling 
Informatica, ETL application, e- 
business intelligence, Data- 
warehousing, SAS, ERP. CRM 
RDBMS - Oracle; GU! Tools 
ASP, J2EE, JSP. JDBC Java 
Script, EJB, Web Sphere 
WebLogic, ASR/TTS, CTI. 40% 
travel to client sites req'd 
Resumes to: JCG Technologies 
Inc., 477 Congress St, 5th FI 
Portland, ME 04101 


Systems Analyst - Analyze user 
reqmts, procedures & problems 
to automate processing & to 
improve existing computer sys- 
tem. Confer w/personnel invol- 
ved to analyze current opera- 
tional procedures, ID problems 
& learn specific input & output 
reqmts such as forms of data 
input, how data is to be summa- 
rized & formats for reports 
Upgrade system & correct errors 
to maintain system after 
impimtn. Prep time & cost esti- 
mates for completing projects. 
BS in Electronics or Comp Engg 
& 2 yrs exp reqd. 40hr/wk, 9a- 
5p, $17.63/hr. Send resumes to 
Rene Gaviola, OLRA Educa- 
tional Foundation, 10101 Harwin 
Dr, #125, Houston, TX 77036. 


R Systems, Inc. is a giobal infor- 
mation technology services 
company and it has multiple Job 
openings for the following posi- 
tions at its corporate office in 
Sacramento as well as Project 
sites throughout the 
United States: 


+ Applications Programmer 
+ Database Analyst 

+ Software Engineers 

+ Systems Analyst 

+ Network Analyst 

+ IT Project Managers 

* Business Analyst 

+ Sales Engineer 

+ Programmer Analyst 

+ Sales Manager 

+ Database Administrators 
+ Market Research Analyst 


Minimum requirement: Bach- 
elor's degree or equivalent and 
one year experience in the job 
offered. All positions may involve 
relocation to project sites. 


Submit detailed resume and 
position applied for to: 


Attn: Venkatesh Sundararajan 
5000 Windplay Drive Suite 5 
El Dorado Hills, CA 95762 


Computers 


PROCESS ENGINEER 
R.R. Donnelley & Sons Co 
(Nashville, TN), is seeking to 
hire a Process Engineer Ii to 
design, develop & document in- 
tegration software used to auto- 
mate & facilitate direct interac 
tion between existing legacy 
systems & the general ledger 
Assess the current systems/pro- 
cesses, recommend & imple- 
ment design solutions to bridge 
& transform data to enable auto- 
mation to the ledger. Develop & 
execute extensive testing plans 
& develop plans to migrate pro- 
duction ready applications to 
corporate production servers 
using version control software 
Maintain, tune, execute network 
admin. on the development ser- 
ver. Must have Bach. deg 
CIS & 3 yrs exp 
pleted projec 


ver, JAVA Script. Visual B 
Scripts. Access, ASP.net. 
HTML, and ETL modeling 
work administration & ver 
control software. Please ema 
resume to: corporateprocessen 


Software Engineers to ar 
op financial a 


VC++, 


Rational Rose, CrystalReport: 
ADO under Windows/UNIX O 
perform system/func 

analys' 

ject specs an e 
al model with users:pro 


software _Reaui 

eignequ 

branch) \ w vith 1 yr exp in IT 
Salary. Comp.salary. f 

travel involved. Resume to: HR 
Autosig S ms, Inc., 201,Price 
Hills Trail, Sugar Hill, GA 30518 


CBT Nuggets 
(888) 507-6283 & (541) 284-5522 
www.cbtnuggets.com 


Affordable training videos on CD 


MCSE, MCDBA, MCSD, CCNA, 
Citrix, Linux, A+, Net + 


March 2004 


a 
| 
Z 
: 
uzzled 
| 
Studio.net, Microsoft SQL Ser. 7 
using OOD,.C++, 
wen SY Visual Source Safe, SQL Server. 
> 
at: training/user support for related 
app! software; performdebug 
Aninowsky. 
Contact the companies listed below 
help you with your training needs! 


Engineer 


Pitney Bowes Inc. has an open- 
ing in its Shelton, Connecticut 
office for an Engineer. 


Develop new concepts and pro- 
totypes in the areas of intelligent 
networked devices and informa- 
tion appliances for mail and 
messaging and develop novel 
embedded system solutions. 


Aust possess at least a bache- 

lors degree or its equivalent in 
Electrical Engineering, Comp- 
uter Science or a related field 
and relevant work experience. 
including college coursework. 
Project and/or work experience 
with USB software driver devel- 
opment and hardware interfac- 
ing; embedded software devel- 
opment experience at the API 
level of various handheld and 
wireless devices such as the 
IPAQ, Dolphin and Symbo! scan- 
ners; embedded Java program- 
ming experience to author 
device independent software 
interfaces for use in enterprise 
level integrated systems;trou- 
bieshooting wireless connectivi- 
ty issues at the hardware and 
API level (including vendor inter- 
facing and verification and vali- 
dation of system built to specifi- 
cation); and hardware level 
debugging of wireless and wired 
components 


Resume and/or cover letter 
must reflect each requirement 
above and specify reference 
code E/MZ or it will be rejected. 


Forward resume to Robbin Drew 
Elliott, Pitney Bowes Inc., One 
Elmcroft Road, Stamford, CT 
06926-0700 


Intelligent Digits, a fast growing 
software Development Com- 
pany is looking for 


Market Research Analyst: 

Market research, MIS, gathers 
information, forecast future mar- 
keting trends, and strategy, con- 
duct and manage promotional 
campaign, prepare reports and 
data collection, Respond RFP. 
Master degree with one year 
experience in all the above. 


Programmer Analyst: 

With bachelor degree and 2yrs 
experience, skills required for 
design, development & adminis- 
tration using DB2UDB, Oracle. 
Sybase, J2EE, XML, C++, Web 
servers, Shell scripting and 
WAP Technologies. 


We accept foreign education 
equivalent of the degree, or 
the degree equivalent in edu- 
cation and experience. 


Send Resume to HR, Intelligent 
digits, Inc., 701 Fourth Avenue 
South, # 500, Minneapolis, MN 
55415 careers@intellegentdig 
its.com 


Systems Analyst. Job location 
Atlanta, GA. Duties: Provide 
Java develop. on inbound sys- 
tems. Design & develop Java 
modules across appl. cycles. 
Maintain develop. speed & 
progress of systems per project 
specs. Resp. for maint. on exist- 
ing Java projects. Develop, 
encode, test, debug docs & 
install programs for large scale 
or high volume transactions 
using Websphere Studio 
Application Developer, EJB 
JSPS, Serviets & Struts. 
Requires: B.S. in Comp. Sci 
Eng. or a related field (will 
accept any comb. of educ. & 
exp. equiv. to a B.S. degree) & 2 
yrs. exp. in the job offered or 2 
yrs. exp. as a Consultant, 
Prog/Analyst or Prog. Con- 
current exp. must incl. 2 yrs. exp. 
developing encoding, testing & 
debugging docs for large scale 
or high volume transactions & 2 
yrs. exp. using Java Mail 
resume (no Calls) 

Brown CTG, Inc 
Gateway Dr Suite 
Melbourne, FL 32901-2636 


A position is available for a 
Senior Systems Engineer in 
Durham, North Carolina with a 
software development company. 
The Senior Systems Engineer 
will provide technical services to 
HSD clients, including installing 
upgrading, and migrating prod- 
ucts, troubleshooting applica- 
tions, hardware, and network 
issues and advising on 
RDBMS, NOS, and hardware. 
Candidates should possess an 
Associate's degree in Engineer- 
ing Technology or a related field 
and at least two years’ experi- 
ence in computer systems engi- 
neering, including at least one 
year's experience in Oracle, Cit- 
rix, Crystal Reports and UNIX 
Apply by mail to: 
Shelley Ayers 
Per-Se Technologies 
300 West Morgan Street 
Suite 175 
Durham, North Carolina 27701 


SYSTEMS ANALYST to ana- 
lyze, design, develop, imple- 
ment, test and integrate appli- 
cation software systems and 
PLM domain using MS SQL 
Server, Visual Basic, ASP, Java 
Script, VB Script and DHTML on 
Windows platform. Require 
B.S. degree in Com-puter 
Science/Engineering, or a 
closely related field with 2 yrs of 
exp in the job offered or as a 
Programmer/Analyst. Extensive 
travel on assignments to vari- 
ous client sites within the U.S. is 
required. Competitive salary 
offered. Apply by resume to 
Vijay Vasandani, Axiom Sys- 
tems, Inc., 11575 Great Oaks 
Way, Ste 130, Alpharetta, GA 
30022; Attn: Job LB 
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BMC SOFTWARE INC. 

BUREAU OF LABOR STATISTICS 
BUSINESS TECHNOLOGY 

GROUP LLC 

CANADIAN SECURITY 

INTELLIGENCE SERVICE 

CAPITAL ONE FINANCIAL CORP. 
(CARGILL INC. 

CARNEGIE MELLON UNIVERSITY . . 
(CENTER FOR INTERNET SECURITY 

CERT COORDINATION CENTER 
CHARLES SCHWAB & CO. 

CHICAGO BOARD OF TRADE 

CISCO SYSTEMS INC. 

CITIGROUP INC. 

CITRIX SYSTEMS INC. 


CLARITY PAYMENT SOLUTIONS INC. 
COMPOSITE SOFTWARE INC. 
COMPUTER ASSOCIATES 
INTERNATIONAL INC. 

CORBUS LLC 

CRITICAL INFRASTRUCTURE 
PROTECTION BOARD. 
CULPEPPER AND 

ASSOCIATES INC. 
DAIMLERCHRYSLER AG. 
DAVIDSON HEALTHCARE 
DECATUR JONES EQUITY 
PARTNERS LLC 

DELL INC. 

DOLE FOOD CO. 

ELECTRONIC DATA SYSTEMS CORP. 
EMC CORP. 

ENTERPRISE STORAGE 

GROUP INC. 

EVANS DATA CORP. 

FBI 

FIDELITY NATIONAL 

FINANCIAL INC. 

FLAMENCO NETWORKS INC. 
FORD MOTOR CO. 

FORRESTER RESEARCH INC. 
FREE SOFTWARE FOUNDATION 
GARTNER INC. 114.1632, 
GAS TECHNOLOGY INSTITUTE 
GATEWAY INC. 
GUPTA TECHNOLOGIES LLC 
HARVARD RESEARCH GROUP INC. 


DIRECTORATE 

INFORMATION SYSTEMS AUDIT 
AND CONTROL ASSOCIATION 
INFORMATION TECHNOLOGY 
ASSOCIATION OF AMERICA. 
INFORMIX CORP. 

INFRAVIO INC. 

INTEL CORP. 

INTELLIGENCE SYSTEMS 
SUPPORT OFFICE 
INTERNATIONAL STANDARDS 
ORGANIZATION . 
INTERNATIONAL 
TELECOMMUNICATION UNION 
INTERNET CORPORATION FOR 
ASSIGNED NAMES AND 
NUMBERS. 

IT GOVERNANCE INSTITUTE 
SOFTWARE AG 

JP. MORGAN CHASE & CO. 

JDA SOFTWARE GROUP INC. 
JUNIPER NETWORKS INC. 
KANBAY INC. 

KENNAMETAL INC. eee 
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& BYERS 

LEVERAGE PARTNERS INC... 
LINCOLN FINANCIAL GROUP. . . 
LOCKHEED MARTIN CORP. . . 
LOCKHEED MARTIN ENTERPRISE 
INFORMATION SYSTEMS. . 

LS! LOGIC CORP. 


NAME.COM LLC 

NATIONAL CYBER 

SECURITY DIVISION 

NATIONAL INSTITUTE OF 
STANDARDS AND TECHNOLOGY 
NCR CORP. 

NEW YORK COMMUNITY BANK 
NIMBLE TECHNOLOGY INC. 
NORTEL NETWORKS LTD. 
NORTHWESTERN UNIVERSITY 34 
OBJECTVIDEO 6 
OFFICE OF MANAGEMENT 
AND BUDGET 

ONTARIO LOTTERY AND 
GAMING CORP. 

ORACLE CORP. 

OUTERBAY 

TECHNOLOGIES INC. 
PALMONE INC. 

PALO ALTO RESEARCH 

CENTER INC. 

PEOPLESOFT INC. 

PINK ELEPHANT INC. 

PPL SERVICES CORP. 
PRESIDENT'S COUNCIL OF 
ADVISORS ON SCIENCE AND 
TECHNOLOGY 

PRESIDENT'S CRITICAL 
INFRASTRUCTURE 
PROTECTION BOARD 
PRINCETON SOFTECH INC. 
PROSIGHT INC. 


RETIREMENT SYSTEMS, 

OF ALABAMA 
ROBERT HALF TECHNOLOGY INC. 
SAND HILL GROUP 

SANS INSTITUTE 

SAP AG 

SIEBEL SYSTEMS INC. 
SOFTWARE ENGINEERING 
INSTITUTE 

SONATA SOFTWARE LTD. 
SOUTHTRUST BANK 
SOUTHWEST GAS CORP. 

SUN MICROSYSTEMS INC. 
SUPERVALU INC. . . . 

SYBASE INC. 

SYMPHONY TECHNOLOGY 
GROUP LLC . 
TATUM CIO PARTNERS LLP .. 
TEKTRONIX INC... 

TERADATA CORP. 

THE BURLINGTON NORTHERN 
AND SANTA FE RAILWAY CO.. 
THE COMPUTING TECHNOLOGY 
INDUSTRY ASSOCIATION INC. 
THE CONCOURS GROUP 

THE EVEREST GROUP . 

THE MATHWORKS INC. 

THE SCO GROUP INC. . 
TOWERGROUP 

TRICON GLOBAL 
RESTAURANTS INC. . 
TROLLTECH INC. ... 


U.S. DEPARTMENT OF DEFENSE 

U.S. DEPARTMENT OF 

HOMELAND SECURITY 

U.S. DEPARTMENT OF JUSTICE 

U.S. GENERAL ACCOUNTING 

OFFICE 

U.S. MARINE CORPS. 

U.S. NAVY 

U.S. SECURITIES AND EXCHANGE 
COMMISSION. 10,32 
UNIMAX SYSTEMS CORP. 39 
UNITED NATIONS DEPARTMENT OF 
ECONOMIC AND SOCIAL AFFAIRS 
UNIVERSITY OF CALIFORNIA, 

BERKELEY 

UNIVERSITY OF MINNESOTA. 
UNIVERSITY OF SOUTHERN 

CALIFORNIA 

VALDEL XTENT GLOBAL 

SERVICES PVT. LTD. 6 
VANGUARD 

COMMUNICATIONS CORP. “4 
VERISIGN INC. . . . 21,58 
VERNIER NETWORKS INC. 36 
VIRGIN ENTERTAINMENT GROUP INC. ..1 
VMWARE INC. 

WEATHER.COM 

WORLD TRADE ORGANIZATION 
WORLDCOM INC. 
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Continued from page 
SCO Suits 


based Clarity Payment Solu- 
tions Inc. “Most here 
consider waste every- 
body’s time.” 

Kuchlein said runs Linux 
servers almost exclusively. 
about double our in- 
stalled base well” for Clari- 
ty’s main production system, 
said. “I’m buying truck- 
load more servers, and they’re 
all going Linux well. 
The SCO thing hasn't even 

Corey Corrick, director 
operations Web services 
provider Flamenco Networks 
Alpharetta, Ga., said will 
continue use Red Hat Inc.’s 
Advanced Server 3.0 Linux for 
the company’s managed data- 
base and application servers 
despite the lawsuits last week. 
“We're waiting for things 
shake out court,” Corrick 
said. “[SCO] keep[s] suing, but 


they haven’t shown anything.” eral court Nevada, claims 


“If people would prefer 
work through the court system, 
then file complaint and 
work through the court 
system,” said Darl McBride, 
SCO’s president and CEO. “De- 
pending which way cus- 
tomers want go, ac- 
commodate their desires.” 

McBride, speaking during 
conference call about SCO’s 
financial results, didn’t re- 
spond directly when asked 
the company would refund 
any licensing fees loses 
the cases against Daimler- 
Chrysler and AutoZone 
well ongoing copyright 
infringement suit against IBM. 

SCO sued DaimlerChrysler 
Michigan state court, 
charging that the automaker 
violated its software licensing 
agreement with SCO refus- 
ing provide requested 
“certification compliance’ 
part software audit. 
The suit against Memphis- 
based AutoZone, filed fed- 


that the retailer illegally 
running versions Linux that 
contain Unix code copyright- 
SCO. Both suits seek un- 
specified damages. 

DaimlerChrysler spokes- 
woman declined comment 
about the suit, saying that the 
automaker received 
copy the document. Infor- 
mation IBM’s Web site in- 
dicates that DaimlerChrysler 
has used Linux for the past 
two years 108-node IBM 
server cluster for vehicle 
crash analysis and simulation. 

Ray Pohlman, spokesman 
for AutoZone, said his compa- 
also had not yet seen the 
lawsuit and couldn’t 
about SCO’s copyright claims. 
our understanding, how- 
ever, that SCO has sent letters 
hundreds companies, 
making similar allegations,” 
said. Pohlman dis- 
cuss AutoZone’s use of Linux. 

Red Hat Inc. confirmed that 


AutoZone had used Red Hat 


Linux run its in-store in- 
tranet until “several months 
ago.” AutoZone has also been 
SCO customer, using SCO 
Unix run applications such 
its point-of-sale systems. 

McBride said Daimler- 
Chrysler and AutoZone were 
targeted because they failed 
respond SCO’s warnings 
that violations its intellectu- 
property would longer 
tolerated. the case Daim- 
lerChrysler, McBride said 
was “one thousands com- 
panies” that received written 
notices from SCO late last year 
detailing their obligations un- 
der the vendor’s Unix System 
source code license deals. 

“Some companies respond- 
appropriately and certified 
their compliance with the 
terms the agreements,” 
McBride said. “Some compa- 
nies, including DaimlerChrys- 
ler, have failed respond ap- 
propriately.” 

Dion Cornett, financial an- 
alyst Decatur Jones Equity 


Partners LLC Chicago, said 
the charges against Daimler- 
Chrysler and AutoZone will 
difficult for SCO prove. 

For example, SCO officials 
discussed AutoZone’s alleged 
use some specific Unix file 
types shared-source li- 
braries during their confer- 
ence call, Cornett said. But 
AutoZone says doesn’t use 
those files, according Cor- 
nett. “Without knowing what 
building blocks AutoZone 
using, the claim looks some- 
thing like fishing expedi- 
tion,” said. 

don’t think they’re going 
get anywhere,” said Bill 
Claybrook, analyst Har- 
vard Research Group Har- 
vard, Mass. “They have actual- 
struck with some good- 
sized customers here. But 
don’t think anybody’s going 
rush out and buy license for 
Unix technology]. It’s 
basically another attempt 
wrangle money out people.” 
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Continued from page 
BizTalk Server 


and customer theft, according 
Paul Duchouquette, direc- 
tor the Los Angeles- 
based retail music chain. 

The department worked 
with Xavor Corp., Microsoft- 
certified partner Irvine, 
Microsoft’s SharePoint Ser- 
vices that Virgin loss-pre- 
vention specialists can set con- 
ditions under which they want 
high number refunds are be- 
ing issued certain cashier. 
That threshold information 
stored XML SQL Server, 
and BizTalk’s rules engine ac- 
cesses the XML file, said Am- 
mara Masood, senior vice 
president Xavor. 

Every minutes, BizTalk 
polls the transactions logged 
each store’s point-of-sale 
systems, and the transaction 
data passed the process 


orchestration engine, she said. 
Business rules are triggered, 
and when suspicious activity 
detected, employees are 
alerted through the SMTP 
server, Masood noted. 

“They can literally that 
register and ask the cashier 
some questions,” Duchou- 
quette said, adding that there 
has been change culture 
result. “The real-time report- 
ing actually creates psycho- 
logical impact employees 
considering theft.” 

Before the system went live 
January, Virgin did loss pre- 
vention through observation 
and analysis transaction 
logs sent third party. But 
the third-party reports took 
days arrive and were cum- 
bersome analyze. Now, Biz- 
Talk’s business activity moni- 
toring pushes transaction data 
SQL Server Analysis Services, 
and there are only four consol- 
idated reports, Masood said. 

Virgin also using some 
BizTalk’s more traditional 


functionality. The software 
maps the universal product 
code from the transaction logs 
with the artist, title, SKU and 
other data stored in its JDA 
Software Group Inc. merchan- 
dising system, which uses 
IBM DB2 database running 
AS/400, Masood said. 
Peggi Douglass, director 
services Retirement Sys- 
tems Alabama Mont- 
gomery, was looking Java- 


Server 2004 


Scalable business rules engine 


® Business process management 


Ability represent human 
workflow business process 
diagrams 

Business activity 

with Visual Studio 
development environment 


based business-rules products 
when she learned that BizTalk 
Server 2004 would include 
that functionality. BizTalk 
made more sense because 
was less expensive and RSA 
Microsoft shop, she said. 

RSA provides retirement 
and health insurance benefits 
about 290,000 employees, 
and the department wanted 
rules engine physically 
separate the business rules 
from the application code 
that its systems are easier 
maintain and modify. Before, 
the rules were buried the 
code the individual applica- 
tions, Douglass said. Under the 
new system, rules change 
can made one place. 

Developers use BizTalk Serv- 
er’s Business Rules Composer 
build the rules and policies, 
such name change requir- 
ing proof documentation. RSA 
hopes eventually allow its 
business users make modifi- 
cations rules themselves, 
but far, the company has 


found that the product isn’t 
easy for non-IT staffers use 
would like. Douglass said 
RSA may look third-party 
products with better graphical 
components. 

RSA has also been dabbling 
with the workflow capabilities 
BizTalk Server for validat- 
ing addresses for those who 
receive retirement benefits 
periodic basis. 

Jess Thompson, analyst 
Gartner Inc., said the busi- 
ness process management 
functionality was poor Biz- 
Talk Server 2002 because 
supported the automation 
processes that involved only 
applications Web services. 
The new version adds support 
for business processes involv- 
ing human-based interaction, 
said. 45241 


SIEBEL ADD-ONS 


Siebel will offer industry-specific integration 
products built around BizTalk Server 2004 
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Legal Clarity 


HEN LAWSUIT GOOD THING? When 
will actually clear problem. Which why, 
strange seems, I’m actually glad VeriSign just 
sued the Internet Corporation for Assigned 
Names and Numbers [QuickLink 45059]. 
The problem that VeriSign contends that ICANN doesn’t have 
the authority regulate new domain-name-related businesses such 
VeriSign’s late, unlamented Site Finder service. ICANN believes 


does have that authority. 


And until court decides who’s right, we’ve got mess. 


What sort mess? Think back last fall, 
when VeriSign rolled out Site Finder chang- 
ing the way its .com root servers worked. Those 
servers contain the central database which 
.com domains belong which addresses. 

when VeriSign gimmicked its servers, 
user who mistyped domain name didn’t get 
error message, was rerouted advertis- 
ing-driven VeriSign Web site. Meanwhile, appli- 
cations broke they depended the now- 
missing error messages. And e-mail got mis- 
routed. And some Internet service providers re- 
sponded gimmicking their own DNS servers 
work around VeriSign’s gimmickry. Eventual- 
ly, ICANN threatened lawsuit its own. 
VeriSign backed off. Stability returned. 

Hey, compared with more episodes Gim- 
mick Wars and potential destabilization the 
Internet, VeriSign’s lawsuit sounds pretty good. 

When talked VeriSign CEO Stratton 
Sclavos the wake the Site Finder fiasco, 
told what VeriSign really wanted was some 
clarity when came launching new domain- 
name-based services. tried respect 
quasi-regulatory role, said. But 
some VeriSign’s proposals had been stalled 
ICANN’s fuzzy, ill-defined, con- 
sensus-driven process for years. 
There was way tell how long 
approval might take, proposal 
would ever approved. 

Apparently, Sclavos never did get 
the clarity wanted. Now VeriSign 
headed for court with ICANN. 


| 


the court decides ICANN right, that will 
provide clarity. will mean ICANN has ap- 
prove any new business ideas that will affect 
how domain names are handled. 

But will also mean big new responsibilities 
for ICANN. more claiming that it’s just 
technical standards body. more slow, fuzzy 
approval processes. more wishy-washy 
decision-making. ICANN will have become 
full-fledged regulator, with processes and 
practices that are open, transparent and well 
defined. short, wins, ICANN will 
never the same. 

And the court decides VeriSign right? 
That provides clarity, too. ICANN get 
regulate Site Finder, foreign-language 
domain names that use non-ASCII characters, 
the Wait Listing Service that would let 
VeriSign customers back-order .com domain 
names whose registrations are soon expire. 
role will just set technical 
standards. 

But that will leave regulatory gap. Think it’ll 
last long? Don’t count it. Lawmakers regular- 
try stick their fingers the domain-name 
pie. The International Telecommunication 
Union has proposed replacing 
ICANN with World Trade Orga- 
nization-style group. And the Com- 
merce Department, which created 
ICANN, can create new agency 
decide leave domain-name 
businesses unregulated. 

other words, VeriSign wins, 
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The Care and Feeding Users 


Four five times year, this single, attractive female 
user tearfully asks sysadmin pilot fish first thing the 


morning reset all her passwords. Fish always does 


it, and the user leaves smiling. But fish can’t under- 

stand why she’s upset about simple password re- 
set until finally mentions someone else the 

office. “Her co-worker explained that she usually used 

her name password,” fish says, “and 

would want change when she had been dumped.” 


Not Her Wise 
Fault, SHARK 
Really Office manager 
Panicky user gets peeved 
turn off when the 
the laptop she has weather forecast the 
rowed, and now company’s intranet 
afraid she has broken wrong. “She complained 
where,” says pilot fish weather was reported 
who’s called help. “Fi- correctly,” says the local 
nally, find support pilot fish. 
that says and said get the 
it, but nothing forecast from Weather.- 
Another user com does say this 
our discussion and says, the Web site she re- 
“You got the right sponded that was still 
you just have hold the fault since 
for seconds. was our Web site. But 
you hold too long, bother forward- 
explain the user it’s knowing the would 
not her take poorly.” 
idiots who designed 
thing were jerks.” Hey, Works, 

Works 
Out Whack This user just can’t re- 
All day long, this member her password. 
complains, his “She would forget be- 
keeps going and tween Friday and Mon- 
After few weeks day morning,” says sup- 
whacking get port pilot fish. “She 
working again, would call and say she 
who investigates and ask, What your pass- 
figures out. “Giving word? She invariably 
whack shook the repiied, forgot.’ 
desk,” sighs fish. made her password 
moved the mouse just iforgot. When she called 
enough turn off the the next Monday 
screen asked her what her 
the screen saver and password was. She 
probably saved replied, forgot.’ And 
tor, computer and desk that was the end 
from getting destroyed.” problem.” 


Charges will fly. Rhetoric will heat 
up. Lawyers will get rich. 

And, yes, finally get some 
clarity. Because the center 
VeriSign’s suit that question: Can 
ICANN regulate domain-related 
business ideas not? 


FRANK HAYES, Computer- 
world's senior news colum- 
nist, has covered IT for more 
than years. Contact him 


frank_hayes@computerworid.com. 


domain regulation will never 
the same, either. There may 
more regulation. less. But one 
thing clear: It’ll different. 
And that good thing even 
it’s not exactly the clarity that 
VeriSign looking for. 45201 
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You take your 
companys 
infrastructure 
security seriously. 


we. 


Security primary concern for all us. why we've developed array new tools and guidance, 
centralized microsoft.com/security/IT. resource you can turn for timely news, education, and tools, 
all intended help you beiter plan and manage the security strategy right for your company. 


Take advantage the latest tools and training microsoft.com/security/IT. 


Free Security Training Free Emergency Notifications 
Register for free security management training, Sign stay up-to-date with the latest 
including Security Summit city near you, weekly vulnerability assessments, mitigation advice, 
security Webcasts, and in-depth e-learning designed and patch availability. 

help you improve your security infrastructure. 


Free Security Guidance Kit 
Evaluate detailed guidance and templates, 
then pre-order your free CD-ROM with roadmaps 


Free Tools and Updates 
Streamline patch management with free tools 


such Microsoft® Software Update Services. 
Download software like Microsoft Baseline Security 
Analyzer verify that your systems are configured 
maximize security. 


and how-to guides. Learn how measures like 
automating security patch installation and 
blocking unsafe e-mail attachments can help 
better protect your organization. 


For ongoing guidance better plan and manage your 


company’s security, microsoft.com/security/IT today. 
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